issues  

[jira] Created: (MNG-4459) [regression] Effective settings as visible to plugins contain plain text passwords

Benjamin Bentmann (JIRA)
Fri, 20 Nov 2009 05:38:29 -0800

[regression] Effective settings as visible to plugins contain plain text 
passwords
----------------------------------------------------------------------------------

                 Key: MNG-4459
                 URL: http://jira.codehaus.org/browse/MNG-4459
             Project: Maven 2
          Issue Type: Bug
          Components: Settings
    Affects Versions: 3.0-alpha-4
            Reporter: Benjamin Bentmann


When we introduced MNG-553, the passwords were only decrypted at the transport 
layer and the {{Settings}} instance kept in memory was kept encrypted. E.g. to 
save plugins from accidentally dumping the plain text passwords on the console 
or such.

This does currently not hold for 3.0-alpha-4 as 
{{org.apache.maven.plugin:maven-help-plugin:2.0:effective-settings}} shows.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira