WowUp.CF icon indicating copy to clipboard operation
WowUp.CF copied to clipboard

Cookies from different browsers in WowUp Curseforge AppData cookies database file

Open c619256 opened this issue 1 year ago • 7 comments

I came across the WowUp Curseforge cookie database by chance. It seemed strange to me that the file was so large. Actually, the application should only contain cookies that WowUp needs to run properly. Strangely, however, the cookie database also contains cookies that are responsible for Google authentication, for example, even though I am not logged into the application anywhere. In addition, these are stored in a decrypted form (normally cookies are stored encrypted in chromium-based browsers).

In general, this seemed quite strange to me. So I wanted to use the procmon programme to check whether the application was accessing Edge's cookie database and indeed it was. The programme also tries to access cookie databases from other browsers.

curseforge_1

curseforge_2

As I think this is a very strange behaviour for an application that manages Wow addons, I would like to know if this is an undesired behaviour and if not why the access to cookies of browsers is necessary. It should be noted that only the WowUp Curseforge client exhibits this behaviour. The normal one does not show this behaviour.

c619256 avatar Apr 21 '24 06:04 c619256

I will run this by the Overwolf team who creates the electron build that powers this CF version of the app.

jliddev avatar May 02 '24 22:05 jliddev

Thank you. If you need any more information feel free to ask.

c619256 avatar May 04 '24 05:05 c619256

Any follow-up here? Assuming its not malware on the OP's machine, Overwolf would want to have a very good reason for doing this.

fzarr avatar Jun 12 '24 13:06 fzarr

@jliddev is there any new information from the Overwolf team regarding this topic?

c619256 avatar Jul 06 '24 12:07 c619256

This is concerning. @jliddev could you please provide an update? If the Overwolf team didn't respond, could you please ask them again?

cremor avatar Aug 18 '24 08:08 cremor

The answer to the question per the OW team:

image

So it should have quit doing that a while ago. I just failed to provide an update here.

jliddev avatar Aug 21 '24 22:08 jliddev

I assume this is now fixed with 2.20.0-beta.2? If so, where can I find the cookie database to clear it?

cremor avatar Aug 22 '24 14:08 cremor