OpenVoiceOS / OpenVoiceOS/ovos-utils
Security Concern: Consider using a geolocation service that supports HTTPS
Open
Nobody has claimed this yet.
good first issue
help wanted
- Dominant language
- Python
- Stars
- 6
- Forks
- 12
- Avg merge
- 1d 8m
- Merged PRs (30d)
- 8
Description
As discussed in PR #296 and specifically in this comment, the current implementation uses an unsecured HTTP request to http://ip-api.com for IP geolocation. It is recommended to consider alternative services that provide secure HTTPS connections under free plans.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review PR #296 and the linked discussion about the current HTTP request to ip-api.com. Compare geolocation services that provide HTTPS under free plans, then define the replacement and verify that the unsecured request is no longer used.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100