From 0e10e23dca078183ce34f3ee17809d94a46a973e Mon Sep 17 00:00:00 2001 From: Batuhan Taskaya Date: Wed, 29 Dec 2021 12:03:44 +0300 Subject: [PATCH] Mention explicitly about prompted passwords are stored as raw in the docs --- docs/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/README.md b/docs/README.md index 4befc75d..2b7abcdd 100644 --- a/docs/README.md +++ b/docs/README.md @@ -2014,7 +2014,7 @@ $ cat session.json $ http --session=./session.json pie.dev/headers ``` -All session data, including credentials, cookie data, and custom headers are stored in plain text. +All session data, including credentials, prompted passwords, cookie data, and custom headers are stored in plain text. That means session files can also be created and edited manually in a text editor—they are regular JSON. It also means that they can be read by anyone who has access to the session file.