Assembla home | Assembla project page
 

Ticket #48 (closed defect: fixed)

Opened 3 months ago

Last modified 1 week ago

don't print plaintext password to console

Reported by: Todd O'Bryan <toddobryan@gmail.com> Assigned to:
Priority: normal Milestone: 1.2
Component: mercurialeclipse Version:
Severity: normal Keywords:
Cc:

Description

This seems like a security lapse to me. The password should be replaced with asterisks when printing to the console.

Attachments

Change History

09/13/08 09:09:47 changed by bastiand

  • milestone changed from 1.1 to 1.2.

11/24/08 19:03:05 changed by bastiand

Yes, we should do that. Currently, I investigate how to pass authentication information to Mercurial without leaking it. If we could use Mercurial's interactive mode, the problem would be solved automatically, but right now I don't know how to enforce this modus.

11/24/08 21:12:46 changed by bastiand

  • status changed from new to closed.
  • resolution set to fixed.

MercurialEclipse? is clean now (r933), but there's still a problem in Mercurial. It inserts authentication info into hgrc when cloning. But I guess we can't do anything about it in MercurialEclipse? :(. If there's a solution, I'll implement it, but so far I haven't got any idea how to prohibit this.

Add/Change #48 (don't print plaintext password to console)




Action