proginosko / LeechBlockNG-chrome

LeechBlock NG (Next Generation) for Chrome is a simple productivity tool designed to block those time-wasting sites that can suck the life out of your working day. All you need to do is specify which sites to block and when to block them.
https://www.proginosko.com/leechblock/
Mozilla Public License 2.0
72 stars 14 forks source link

Store hashes instead of passwords when exporting settings #55

Open Anton-V-K opened 1 year ago

Anton-V-K commented 1 year ago

When I enable the option "Include passwords in exported options" and export the settings, the passwords are written in plain text (checked with the Access Control password), and this approach isn't secure. I'd propose to store the hash (SHA-1 or whatever) instead, so the password isn't easily peeked (similar approach is used in https://github.com/ray-lothian/Block-Site). It will not possible to show the password in UI any longer, but I doubt it is a big issue.