Bugsounet_Coding();

    • Register
    • Login
    • Search

    Solved [Gateway] v3.3.4

    Maintenance / Update
    1
    1
    35
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bugsounet
      bugsounet Main Coder last edited by bugsounet

      MM Config address “0.0.0.0” is now denied !

      • It will fix some issue with some EXTs
      • Fix vulnerabilities issues when you expose MagicMirror on internet
        • –> MM Config can be read by every one !
        • –> so, credentials of all modules can be read

      just open the dev tool > console
      and try to enter: config and everyone see your config !
      (just develop by clicking to the arrow)

      c9b03c30-15b3-4a76-abb1-0fb7b647610a-image.png

      Sample by develop EXT-Pages:

      8a055c88-f43a-48a8-a74d-ee5c87093b44-image.png

      It’s dangerous ? no !?

      Note:

      • tested from Chrome browser (MM in server mode)
      • dev tool open: MAJ + CTRL + I
      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Powered by NodeBB | @bugsounet ©2023