popup showing auth error displays password
Browsing web news without a browser
Brought to you by:
carnage4life,
t_rendelmann
Menu
▾
▴
#1259 popup showing auth error displays password
closed
5
2012-09-23
2008-06-28
No
when RSSBAndit cannot connect to Google Reader's API due to network issues (I've seen this with proxy authentication not working) it shows the exception in a popup. the exception contains the full URL, where username & password is passed as a variable in the URL.
It is SSL/HTTPS - therefore it will be safe on the wire, but, if it is displayed, people that can see your screen will be able to read it.
Logged In: YES
user_id=617459
Originator: YES
this is also exposed in the trace log file:
2008-06-29 09:06:42,472 [4720] ERROR NewsComponents.Feed.GoogleReaderFeedSource [(null)] - Request of 'https://www.google.com/accounts/ClientLogin?continue=http://www.google.com&service=reader&source=RssBandit&Email=muscetta@gmail.com&Passwd=thisisnotmyrealpassword' gets unexpected HTTP response: ProxyAuthenticationRequired
Exception: System.Net.WebException
Message: Request of 'https://www.google.com/accounts/ClientLogin?continue=http://www.google.com&service=reader&source=RssBandit&Email=muscetta@gmail.com&Passwd=thisisnotmyrealpassword' gets unexpected HTTP response: ProxyAuthenticationRequired
Source: NewsComponents
at NewsComponents.Net.AsyncWebRequest.GetSyncResponseStream(HttpMethod method, String address, String& newAddress, ICredentials credentials, String userAgent, IWebProxy proxy, DateTime& ifModifiedSince, String& eTag, Int32 timeout, RequestResult& responseResult, Cookie cookie, String body, WebHeaderCollection additonalHeaders)
at NewsComponents.Net.AsyncWebRequest.GetSyncResponseStream(String address, ICredentials credentials, String userAgent, IWebProxy proxy, Int32 timeout)
at NewsComponents.Net.AsyncWebRequest.GetSyncResponseStream(String address, ICredentials credentials, IWebProxy proxy)
at NewsComponents.Feed.GoogleReaderFeedSource.AuthenticateUser()
at NewsComponents.Feed.GoogleReaderFeedSource.LoadFeedlistFromGoogleReader()
at NewsComponents.Feed.GoogleReaderFeedSource.UpdateFeedList()
at NewsComponents.Feed.GoogleReaderFeedSource.RefreshFeeds(Boolean force_download)