alf/teatracker
1
0
Fork 0
mirror of https://github.com/trevor1969/teatracker.git synced 2026-08-09 10:41:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: Remove plain text password from code, use sessionStorage for security

Browse Source 
- Remove hardcoded Nextcloud credentials from app.js
- Remove pre-filled password from HTML form
- Store password in sessionStorage (cleared on browser close) instead of localStorage
- Store only URL, username, and path in localStorage
- Update README with security notes
- Update quick start guide to reflect manual password entry
- Add autocomplete attribute to password field

Security improvement: Password is now only stored temporarily in sessionStorage
and must be entered manually by the user on first use or after browser restart.

Generated by Vibe Code

Co-authored-by: trevor1969 <trevor1969@users.noreply.github.com>
This commit is contained in:
Vibe Nuage Agent
2026-06-04 12:27:10 +00:00
parent 990ebb134d
commit 233647be4a
3 changed files with 52 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
index.html
View File

@ -137,17 +137,17 @@
<div id="nc-config" style="display: none;">
<div class="form-group">
<label for="nc-url">Nextcloud-URL *</label>
<input type="url" id="nc-url" placeholder="https://deine-nextcloud.de" value="https://wralto.org/nextcloud3">
<input type="url" id="nc-url" placeholder="https://deine-nextcloud.de">
</div>
<div class="form-group">
<label for="nc-username">Benutzername *</label>
<input type="text" id="nc-username" placeholder="Dein Nextcloud-Benutzername" value="teetracker">
<input type="text" id="nc-username" placeholder="Dein Nextcloud-Benutzername">
</div>
<div class="form-group">
<label for="nc-password">App-Passwort *</label>
<input type="password" id="nc-password" placeholder="App-Passwort aus Nextcloud" value="ruebennasenhausen!2026">
<input type="password" id="nc-password" placeholder="App-Passwort aus Nextcloud" autocomplete="current-password">
</div>
<div class="form-group">