You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the file wallets.js, the password sent in the request body is directly used for encryption and decryption in various functions like addWalletV2, addWalletTron, getWalletTron, and getWalletTronV2. Handling passwords in plain text can pose a security risk.
Suggestion: Instead of directly using the password from the request body, consider hashing the password before using it. This way, even if an attacker gains access to your system, they won't be able to easily decipher the original password.
`const hashedPassword = hashFunction(req.body.pass);
Verification: Once you've implemented the changes, verify that all instances where the password is used have been updated to use the hashed version. Also, ensure that the encryption and decryption processes are still working correctly by running your tests or manually checking these functionalities.`
The text was updated successfully, but these errors were encountered:
In the file wallets.js, the password sent in the request body is directly used for encryption and decryption in various functions like addWalletV2, addWalletTron, getWalletTron, and getWalletTronV2. Handling passwords in plain text can pose a security risk.
Suggestion: Instead of directly using the password from the request body, consider hashing the password before using it. This way, even if an attacker gains access to your system, they won't be able to easily decipher the original password.
`const hashedPassword = hashFunction(req.body.pass);
Verification: Once you've implemented the changes, verify that all instances where the password is used have been updated to use the hashed version. Also, ensure that the encryption and decryption processes are still working correctly by running your tests or manually checking these functionalities.`
The text was updated successfully, but these errors were encountered: