Skip to content

[Bug]: 密碼以明文形式儲存在本地設定檔中(CWE-256) #214

@LilaS-tw

Description

@LilaS-tw

📝 Description

勾選「記住帳號」後,密碼以明文形式儲存在本地設定檔中。

📱 Screenshots / Videos

Image

▶️ Steps to Reproduce

  1. 啟動應用程式
  2. 勾選「記住帳號」並登入
  3. 開啟檔案:%APPDATA%\ricecall\config.json

✅ Expected Behavior

密碼不應以明文形式儲存在本地檔案中。

❌ Actual Behavior

密碼以明文形式儲存在 %APPDATA%\ricecall\config.json 中,可直接讀取。

📋 Debug Information

Version:0.3.4
OS:Windows

💥 Crash Dumps / Stack Traces / Logs

No response

💬 Anything Else We Should Know?

https://cwe.mitre.org/data/definitions/256.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions