jackwener / jackwener/xiaohongshu-cli
为什么会请求获取所有浏览器的confidential information？
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 2.6k
- Forks
- 272
- PR merge metrics
- No merged PRs in 30d
Description
### Version
latest
### Operating System
macOS
### What happened?
安装完成后，xsh login 完成后，依次请求所有浏览器的confidential information，包括chrome、edge等
### Expected behavior
不应该请求各个浏览器的confidential information
### Steps to reproduce
```bash
```
### Error output / logs
```text
```
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the xsh login flow and inspect what triggers access to Chrome, Edge, and other browser information on macOS. Reproduce the post-login behavior and identify whether the requests are expected or unintended. Done means the cause is documented and the unwanted browser-information requests no longer occur, with a verification check for login.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- macos, python
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100