thearyadev / MSRF

Automates Microsoft rewards.
Apache License 2.0
62 stars 9 forks source link

[BUG] passwords are output in plain text in the webui logs #29

Closed mgrimace closed 1 year ago

mgrimace commented 1 year ago

Describe the bug Passwords are occasional output in plaintext in the webui logs, which would technically be viewable by anyone connected to the local network (minimal risk as they'd need the IP and Port, but still not ideal).

Sample:

screenshot

Expected behavior Ideally, passwords would not be shown in the webui logs

Version Number 0.8 b - docker/server deployment

Error Report Not an error per se, more of a minor security issue/preference.

thearyadev commented 1 year ago

I previously had them hidden, but revealed them during testing when i had an issue with password submissions in the GUI.

will hide them in the next version.

Thanks.