orgzly-revived / orgzly-android-revived

Outliner for taking notes and managing to-do lists
https://www.orgzlyrevived.com
GNU General Public License v3.0
665 stars 42 forks source link

Address issues in the Pithus report #62

Open alensiljak opened 1 year ago

alensiljak commented 1 year ago

There are some issues that we would be better if resolved:

https://beta.pithus.org/report/7b5132336f59f5583cd636d36e3c04cd692466fa820e84a6b018f0a180be12da

Mainly

Base config is insecurely configured to permit clear text traffic to all domains.
Scope: ['*']

in the network analysis section.

Related to #7

alensiljak commented 1 year ago

As I wrote elsewhere, my guess is that this setting is needed for a webdav sync.