Use of GET Request Method With Sensitive Query Strings

Summary

The weblate package is a web-based localization tool. In version prior to 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code repository URL contains GitHub credentials, the confidential "PAT" and "username" are shown in plain text and are saved into browser history. Moreover, if the request URL is logged, the credentials are written to logs in plain text. If using Weblate official Docker image, nginx logs the URL and the token in plain text.