From c371da364c514114fc4e6492def44e416e910230 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dag-Erling=20Sm=C3=B8rgrav?= Date: Mon, 11 Jan 2016 14:09:30 +0000 Subject: [PATCH] Note that the secret should also be percent-encoded. git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@887 185d5e19-27fe-0310-9dcf-9bff6b9f3609 --- lib/liboath/oath_key.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/liboath/oath_key.c b/lib/liboath/oath_key.c index 4eb99a8..b0d2fca 100644 --- a/lib/liboath/oath_key.c +++ b/lib/liboath/oath_key.c @@ -70,7 +70,7 @@ oath_key_to_uri(const struct oath_key *key) return (NULL); } - /* XXX the label should be URI-encoded */ + /* XXX the label and secret should be URI-encoded */ if (key->mode == om_hotp) { urilen = asprintf(&uri, "otpauth://%s/%s?" "algorithm=%s&digits=%d&counter=%ju&secret=",