sybrenstuvel / flickrapi

Python Flickr API implementation
https://stuvel.eu/flickrapi
Other
155 stars 33 forks source link

Token cache 'oauth-tokens.sqlite' unprotected #118

Open Sean-T-Moore opened 5 years ago

Sean-T-Moore commented 5 years ago

After authentication, tokens are stored in ~/.flickr/oauth-tokens.sqlite and on my system I found both this directory and file were world readable. I suggest when creating database, set permission to be only readable by user that did the authenticating to prevent any unintentional use by others on a system.