Benjamin Bentmann (JIRA)
Fri, 20 Nov 2009 05:38:29 -0800
[regression] Effective settings as visible to plugins contain plain text passwords ----------------------------------------------------------------------------------
Key: MNG-4459
URL: http://jira.codehaus.org/browse/MNG-4459
Project: Maven 2
Issue Type: Bug
Components: Settings
Affects Versions: 3.0-alpha-4
Reporter: Benjamin Bentmann
When we introduced MNG-553, the passwords were only decrypted at the transport
layer and the {{Settings}} instance kept in memory was kept encrypted. E.g. to
save plugins from accidentally dumping the plain text passwords on the console
or such.
This does currently not hold for 3.0-alpha-4 as
{{org.apache.maven.plugin:maven-help-plugin:2.0:effective-settings}} shows.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira