Password stored as plaintext in cookie

ni-c / heimcontrol.js

Home-Automation with node.js and Raspberry PI

MIT License

1.41k stars 297 forks source link

Password stored as plaintext in cookie #103

Open tjanson opened 9 years ago

tjanson commented 9 years ago

Heimcontrol sets a cookie with the password in plaintext, which is clearly a security issue. Should either be fixed, or at least mentioned as a warning when registering the user.