|
|
|
[
Permlink
| « Hide
]
Robin Shen [21/Dec/16 09:17 AM]
QB can not help much in this case, as the best thing we can do is to mask all texts equal to any password text in the log. However in this case, the password is splited and passed around, and QB does not know it is a password any more.
It seems like the problem still persists in this scenario:
1) Set 'passwords' as a secret variable with some value. 2) Create parallel step RunAccountsInParallel, create sequential child step in it: ForEachAccount with repeat parameter ACCOUNT. 3) Create 2 child steps in ForEachAccount: SetVariables (type Execute a Script) and RunAnt (type Ant). 4) Update 'passwords' variable in SetVariables step: ${groovy: vars.get("passwords").setValue(util.readFileAsString(new java.io.File(<path_to_file_with_comma_separated_passwords_string_inside>)))}. 5) In the next step - RunAnt - run Ant with the property PASSWORD=${groovy: vars.getValue("passwords").split(",")[params.get("ACCOUNT").toInteger()]} 6) Look in the log - password is exposed as clear value. QuickBuild 6.1 |