Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cookies from different browsers in WowUp Curseforge AppData cookies database file #82

Open
c619256 opened this issue Apr 21, 2024 · 7 comments

Comments

@c619256
Copy link

c619256 commented Apr 21, 2024

I came across the WowUp Curseforge cookie database by chance. It seemed strange to me that the file was so large. Actually, the application should only contain cookies that WowUp needs to run properly. Strangely, however, the cookie database also contains cookies that are responsible for Google authentication, for example, even though I am not logged into the application anywhere. In addition, these are stored in a decrypted form (normally cookies are stored encrypted in chromium-based browsers).

In general, this seemed quite strange to me. So I wanted to use the procmon programme to check whether the application was accessing Edge's cookie database and indeed it was. The programme also tries to access cookie databases from other browsers.

curseforge_1

curseforge_2

As I think this is a very strange behaviour for an application that manages Wow addons, I would like to know if this is an undesired behaviour and if not why the access to cookies of browsers is necessary. It should be noted that only the WowUp Curseforge client exhibits this behaviour. The normal one does not show this behaviour.

@jliddev
Copy link
Member

jliddev commented May 2, 2024

I will run this by the Overwolf team who creates the electron build that powers this CF version of the app.

@c619256
Copy link
Author

c619256 commented May 4, 2024

Thank you. If you need any more information feel free to ask.

@fzarr
Copy link

fzarr commented Jun 12, 2024

Any follow-up here? Assuming its not malware on the OP's machine, Overwolf would want to have a very good reason for doing this.

@c619256
Copy link
Author

c619256 commented Jul 6, 2024

@jliddev is there any new information from the Overwolf team regarding this topic?

@cremor
Copy link

cremor commented Aug 18, 2024

This is concerning. @jliddev could you please provide an update? If the Overwolf team didn't respond, could you please ask them again?

@jliddev
Copy link
Member

jliddev commented Aug 21, 2024

The answer to the question per the OW team:

image

So it should have quit doing that a while ago. I just failed to provide an update here.

@cremor
Copy link

cremor commented Aug 22, 2024

I assume this is now fixed with 2.20.0-beta.2?
If so, where can I find the cookie database to clear it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants