search

scorelab / OpenMF

An Open Source Mobile Forensics Investigation Tool for Android Platform
Apache License 2.0
146 stars 94 forks source link

security bug #240

Closed shivanshuraj1333 closed 3 years ago

shivanshuraj1333 commented 3 years ago

We need to remove the google API key from the file https://github.com/scorelab/OpenMF/React-frontend/src/components/Management/LocationReport.js and figure out a different method without exposing the private key and avoid the security threat.

shivanshuraj1333 commented 3 years ago

Info: The Google API key is created and owned by @swapnalshahil (student at IIT G)

swapnalshahil commented 3 years ago

@shivanshu1333 sir! It's ok if this key is present there as it is free without any limit. But there is also one method to hide it by saving it in .env but again another person will need to generate an API key whenever a new person comes. There are millions of these keys available and are used by people on internet.

shivanshuraj1333 commented 3 years ago

If you're comfortable, in that case I'm closing the issue.