New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Public API Key #65

Closed

Ghost-Sailor opened this issue Jan 16, 2018 · 1 comment · Fixed by #71

Ghost-Sailor commented Jan 16, 2018

You have a public API key in src/util/mod.rs

    let body = serde_urlencoded::to_string([
        ("apiUser", "rustcc"),
        ("apiKey", "Cb2HNnzRBRGq6QLa"),
        ("templateInvokeName", "reset_password"),
        ("xsmtpapi", &xsmtpapi.to_string()),
        ("from", "admin@rust.cc"),
        ("fromName", "Admin"),
        ("subject", "重置密码"),

Leaks your apiKey and where to use it.

Member

miketang84 commented Jan 17, 2018

We'll fix it soon.

miketang84 closed this as completed

miketang84 reopened this

driftluo mentioned this issue

Change reset password logic and hide apikye #71

Merged

driftluo closed this as completed in #71

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment