Skip to content

Commit 3d2f7d9

Browse files
iamezagaleamas
authored andcommitted
Fix no-ip.com credential exposure
When using the DNS updater no-ip.com credentials are exposed due to the use of http. Switching to https fixes the vulnerability.
1 parent 1ee4374 commit 3d2f7d9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

plugins/no_ip.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ class NoAddressPlugin(ServicePlugin):
2525

2626
_name = 'no-ip.com'
2727
_oneliner = 'Updates on http://no-ip.com/'
28-
_url = "http://dynupdate.no-ip.com/nic/update?hostname={0}"
28+
_url = "https://dynupdate.no-ip.com/nic/update?hostname={0}"
2929

3030
def register(self, log, hostname, ip, options):
3131
"""Implement ServicePlugin.register()."""

0 commit comments

Comments
 (0)