[#QB-2306] A Variable entered as a secret value(for example a password) is shown in status step as clear text

QuickBuild

A Variable entered as a secret value(for example a password) is shown in status step as clear text

Created: 30/Jan/15 02:22 PM Updated: 19/Jan/19 01:16 PM

Component/s:

None

Affects Version/s:

5.1.31

Fix Version/s:

None

Original Estimate:

Unknown

Remaining Estimate:

Unknown

Time Spent:

Unknown

File Attachments:

None

Image Attachments:

1. screenshot-1.jpg
(323 kb)

2. screenshot-2.jpg
(322 kb)

3. step-status.png
(132 kb)

Description

« Hide

A Variable entered as a Secret variable (for example a password) is shown in status step as clear text.

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Julian Bassett [30/Jan/15 02:29 PM]

here we can see project_deploy_password is entered as a secret value

[ Permlink | « Hide ]

Julian Bassett [30/Jan/15 02:31 PM]

here we can see the value is properly ***** out

[ Permlink | « Hide ]

Julian Bassett [30/Jan/15 02:35 PM]

a third screen shot showing that the password is dipplayed as clear text in the step status (password ahs been partially coloured out )

[ Permlink | « Hide ]

Robin Shen [31/Jan/15 02:10 AM]

I guess you've used the password as repeat param when define the step "plugin_webdav publish"? QB ignores secret variables in this case when display the status graph as otherwise it might be difficult to differentiate different step instances. Please avoid using password as repeat variable, I'd suggest to pass the password directly into your step as build/environment properties.