oliverwk / lngr

This is for an app that i developed and maintain. It's for monitoring the price of lingerie and helping people to find the right lingerie. It also notifies you if there are new pieces

• 👋 Hi, I’m @oliverwk
• 👀 I’m interested in vanilla web, firebase and swiftui
• 🌱 I’m currently learning (iOS) Nearby Interaction and WatchConnectivity (WatchOS)
• 💞️ I’m looking to collaborate on Apple Wallet NFC
• 📫 You can reach me via Email or Teams

lngr's Issues

Security issue

Hi

You might want to make this repository private or remove your bearer token from the code and git history.

lngr/OpenLocker WatchKit Extension/LockerManager.swift

Line 42 in 95e71b5

request.allHTTPHeaderFields = ["authorization":"Bearer DyW2waOtHIFQfFq2GQe4zEYz8txAx6NEhxHMR5unQy4/AhynnTDzf7YcjJxC+Byi60OFJ/dSJLcawjYFYOL66UQzTGaoxEj9lRvvnsX1Ce1MylKttaY10IYJwQJyNrdHzjPjglrGzeZt4p1ocGMqY2qcrNegxIfWcqbtAyLnJNYMJrRfLXTm1Q6TiowS3xcF88Swjy1shFzaHwNFJvAbDqKEmkwx7t6m57txwP7ipNf2/HA91gd7/qQxcOoWo/oyN8QnkiwsurMEr5wkNLS+B3VgpSpRYnnnIp7TYGg/mu2LF2DNRhyeF2Nen1dnh1EirRovCPcltNsMOZA6C5Zx6wipiqtMujRd93T5MsW9sCU=", "api-version":"3", "content-length":"0", "user-agent":"Mozilla/5.0 (iPhone; CPU iPhone OS 14_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E149"]

Right now it's possible for anyone to open your locker via the Releezeme API.