[GH-ISSUE #1429] Unsafe post notification command #1005

New issue

Closed

opened 2026-05-07 00:29:29 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:29:29 +02:00

Owner

Originally created by @mokeyish on GitHub (Aug 23, 2025).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1429

❓ Question

Here Shouldn't this remind the user? Curl uses HTTP by default, so don't send sensitive information. Or use curl -d "Hi" https://ntfy.sh/topic instead.

github.com/binwiederhier/ntfy@e39498702d/web/src/components/Notifications.jsx (L594)

Originally created by @mokeyish on GitHub (Aug 23, 2025). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1429  :question: **Question**  Here Shouldn't this remind the user? Curl uses HTTP by default, so don't send sensitive information. Or use `curl -d "Hi" https://ntfy.sh/topic` instead. https://github.com/binwiederhier/ntfy/blob/e39498702d1d21de6bdde7926b229a6422409665/web/src/components/Notifications.jsx#L594

BreizhHardware

2026-05-07 00:29:29 +02:00

closed this issue
added the
question
label

BreizhHardware commented

2026-05-07 00:29:30 +02:00

Author

Owner

@binwiederhier commented on GitHub (Nov 16, 2025):

I know that it's HTTP by default in curl. It looks much nicer like this though. Folks can of course use HTTPS.

@binwiederhier commented on GitHub (Nov 16, 2025): I know that it's HTTP by default in curl. It looks much nicer like this though. Folks can of course use HTTPS.

BreizhHardware referenced this issue

2026-05-07 01:02:24 +02:00

[PR #1050] [MERGED] Message size limit+delay limit #1500