[GH-ISSUE #8] Password from floccus sync appears in nextcloud logs #9

Closed
opened 2026-02-25 22:35:46 +03:00 by kerem · 6 comments
Owner

Originally created by @realitygaps on GitHub (Jan 13, 2017).
Original GitHub issue: https://github.com/floccusaddon/floccus/issues/8

Messages in logs include:

/index.php/apps/bookmarks/public/rest/v1/bookmark?user=USERNAME&password=PASSWORD

with nextcloud password in plain text.

Originally created by @realitygaps on GitHub (Jan 13, 2017). Original GitHub issue: https://github.com/floccusaddon/floccus/issues/8 Messages in logs include: \/index.php\/apps\/bookmarks\/public\/rest\/v1\/bookmark?user=USERNAME&password=PASSWORD with nextcloud password in plain text.
kerem closed this issue 2026-02-25 22:35:46 +03:00
Author
Owner

@marcelklehr commented on GitHub (Jan 13, 2017):

Hi @realitygaps!
Thanks for reporting this. I'm afraid that's a flaw with the nextcloud bookmarks app, which is being addressed in the upcoming release, however.

<!-- gh-comment-id:272471259 --> @marcelklehr commented on GitHub (Jan 13, 2017): Hi @realitygaps! Thanks for reporting this. I'm afraid that's a flaw with the nextcloud bookmarks app, which is [being addressed](https://github.com/nextcloud/bookmarks/pull/322) in the upcoming release, however.
Author
Owner

@realitygaps commented on GitHub (Jan 13, 2017):

ah thanks for the information, ill wait for the update then.
also thanks for this extension :)

<!-- gh-comment-id:272473252 --> @realitygaps commented on GitHub (Jan 13, 2017): ah thanks for the information, ill wait for the update then. also thanks for this extension :)
Author
Owner

@marcelklehr commented on GitHub (May 14, 2017):

This is fixed now.

<!-- gh-comment-id:301341734 --> @marcelklehr commented on GitHub (May 14, 2017): This is fixed now.
Author
Owner

@9662 commented on GitHub (May 20, 2017):

Hello @marcelklehr, many thanks for your work on this project! 😊

This is fixed now.

Would that be in 0.10.0? I have that installed and it is still leaking the plaintext app password. Should I open a bug in the Nextcloud tracker?

<!-- gh-comment-id:302857861 --> @9662 commented on GitHub (May 20, 2017): Hello @marcelklehr, many thanks for your work on this project! 😊 > This is fixed now. Would that be in [0.10.0](https://github.com/nextcloud/bookmarks/milestone/3)? I have that installed and it is still leaking the plaintext app password. Should I open a bug in the Nextcloud tracker?
Author
Owner

@9662 commented on GitHub (May 20, 2017):

I have that installed and it is still leaking the plaintext app password.

Never mind. Disabling and re-enabling the Bookmarks app in Nextcloud did it.

<!-- gh-comment-id:302862264 --> @9662 commented on GitHub (May 20, 2017): > I have that installed and it is still leaking the plaintext app password. Never mind. Disabling and re-enabling the Bookmarks app in Nextcloud did it.
Author
Owner

@github-actions[bot] commented on GitHub (Mar 21, 2023):

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

<!-- gh-comment-id:1478281977 --> @github-actions[bot] commented on GitHub (Mar 21, 2023): This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/floccus#9
No description provided.