Password Creation Method may accidentally store wrong password about azpwpush HOT 3 CLOSED

All passwords are send URL Encoded and only decoded right before saving. Have you seen this to be an issue and could you let me know how to reproduce? :)

from azpwpush.

If someone uses the Web Application, they will not run into problems. This issue is strictly around preventing accidental user error. Observe the following request:

Invoke-WebRequest -Uri https://pw.cyberdrain.com/create -Method POST -Body 'password=Thiswill=break'

Obviously, this is a user mistake (not URL encoding the parameter), but it is a fairly understandable mistake, hence in my PR why I explicitly check for "=" and store everything after the first one. If you don't believe it to be a serious enough issue, I definitely understand.

from azpwpush.

Good call, this actually makes me think of creating another endpoint for programmatic access too. I'll integrate your changes.

from azpwpush.