mirror of
https://github.com/itflow-org/itflow
synced 2026-07-26 18:27:14 +00:00
04bf3c234f
Keeps the credential decryption secret out of the URL, so it no longer lands in web-server access logs, proxy logs, or browser history. credentials/read.php now reads api_key_decrypt_password from the request body, matching create/update. Consumers reading decrypted credentials must send it in the body, not the query string.
2.1 KiB
2.1 KiB