[kune-devel] [kune issues] #236: password in url?

Sun Apr 1 20:26:54 CEST 2012

#236: password in url?
---------------------+-------------------
 Reporter:  samer@…  |       Owner:  vjrj
     Type:  defect   |      Status:  new
 Priority:  major    |   Milestone:
Component:  Others   |     Version:
 Keywords:           |  Blocked By:
 Blocking:           |
---------------------+-------------------
 Kune is not working properly today... it may be in the middle of an
 upgrade or sth, and then this might be a temporal issue... but when i
 logged in, the url was
 http://kune.cc/?locale=en&username=samer&password=XXXXXXXXXX#signin%28%29

 where XXXXXXXXXX is my password in clear. This is a security problem, of
 course.

-- 
Ticket URL: <http://kune.ourproject.org/issues/ticket/236>
kune issues <http://kune.ourproject.org/issues/>