Bug #50451
Updated by Nizamudeen A about 3 years ago
Username password are sending in the URL string
{"POST":{"scheme":"https","host":"10.8.128.45:8443","filename":"/api/user/validate_password","query":{"password":"admin456","username":"admin123"},"remote":{"Address":"10.8.128.45:8443"}}}
Password is visible in the body of the request.
!dev.png! !Screenshot from 2021-04-21 13-34-04.png!