| << Back to previous view |
|
[QB-2306] A Variable entered as a secret value(for example a password) is shown in status step as clear text
|
|
| Status: | Closed |
| Project: | QuickBuild |
| Component/s: | None |
| Affects Version/s: | 5.1.31 |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Critical |
| Reporter: | Julian Bassett | Assigned To: | Robin Shen |
| Resolution: | Incomplete | Votes: | 0 |
| Remaining Estimate: | Unknown | Time Spent: | Unknown |
| Original Estimate: | Unknown | ||
| File Attachments: |
screenshot-1.jpg
screenshot-2.jpg
step-status.png
|
| Description |
|
A Variable entered as a Secret variable (for example a password) is shown in status step as clear text.
|
| Comments |
| Comment by Julian Bassett [ 30/Jan/15 02:29 PM ] |
| here we can see project_deploy_password is entered as a secret value |
| Comment by Julian Bassett [ 30/Jan/15 02:31 PM ] |
| here we can see the value is properly ***** out |
| Comment by Julian Bassett [ 30/Jan/15 02:35 PM ] |
|
a third screen shot showing that the password is dipplayed as clear text in the step status (password ahs been partially coloured out )
|
| Comment by Robin Shen [ 31/Jan/15 02:10 AM ] |
| I guess you've used the password as repeat param when define the step "plugin_webdav publish"? QB ignores secret variables in this case when display the status graph as otherwise it might be difficult to differentiate different step instances. Please avoid using password as repeat variable, I'd suggest to pass the password directly into your step as build/environment properties. |