Page MenuHomeFeedback Tracker

Possible Security risk on the launcher mod preset.
Feedback, NormalPublic

Description

Links in the mod preset list HTML are not Secure
they display the mods links with a HTTP instead of a HTTPS.

example: [mod name] Steam http://steamcommunity.com/... (Unsecure/no encryption Connection)
instead of
example2: [mod name] Steam https://streamcommunity.com/... (Secure/Encrypted Connection)

Details

Severity
Minor
Resolution
Open
Reproducibility
Always
Operating System
Windows 10 x64
Operating System Version
19043.1586
Category
Launcher
Steps To Reproduce

Have any mod(s) installed from steam workshop.
Open launcher
Go to MODS tab.
enable any amount of mods.
click PRESET tab
save the mod list as a Preset.
Open the PRESET tab again and select the share button besides the name of the new mod list
Save the file and open it.
There it should display all the mods with a link to each mod

Additional Information

On a side note. I have no idea how your import preset mod list works and if it makes the links automatically HTTPS or if it still imports from the unsecure links.
Just wanted to make sure that the links lead to a encrypted website rather than a non encrypted.

Anyways hope you have a great day to whoever reads this.

Event Timeline

dedmen added a subscriber: dedmen.Mar 21 2022, 7:35 AM

When you visit the link, first thing it does is a HTTPS redirect.
I don't see a security risk here (Unless someone knowing that you are using steam is a security risk to you), but it should still be changed.

dedmen changed the task status from New to Feedback.Mar 21 2022, 7:41 AM

Fixed next dev branch or 2.10 update

dedmen claimed this task.Mar 21 2022, 7:41 AM
dedmen set Ref Ticket to AIII-55031.