[
https://issues.apache.org/jira/browse/FELIX-6570?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17616801#comment-17616801
]
Sagar Miglani commented on FELIX-6570:
--------------------------------------
[~cziegeler] [~laeubi] Thanks for the suggestions.
Even if we use a private property (name starting with a '.'), webconsole is
showing that property with its value in clear text.
Created a PR: [https://github.com/apache/felix-dev/pull/177] (attempted to
incorporate Carsten's suggestions) which *uses metatype hint* and *hides the
value* of Password properties. Should I also hide the private property?
> Components webconsole-plugin shows password in clear text
> ---------------------------------------------------------
>
> Key: FELIX-6570
> URL: https://issues.apache.org/jira/browse/FELIX-6570
> Project: Felix
> Issue Type: Bug
> Components: Web Console
> Affects Versions: webconsole-ds-plugin-2.1.0
> Reporter: Sagar Miglani
> Priority: Major
> Attachments: Screenshot 2022-05-09 at 4.48.42 PM.png,
> webconsole-plugins.patch
>
>
> Open a component details page (eg:
> localhost:8080/system/console/components/${componentId}) for a component with
> a Password Property.
> Passwords are shown in clear text. [^Screenshot 2022-05-09 at 4.48.42 PM.png]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
