Patrick Rhomberg created GEODE-4318:
---------------------------------------

             Summary: gfsh does not redact passwords from history if given 
without =
                 Key: GEODE-4318
                 URL: https://issues.apache.org/jira/browse/GEODE-4318
             Project: Geode
          Issue Type: Bug
            Reporter: Patrick Rhomberg


The {{ArgumentRedactor}} expects arguments in the form {{--option=value}} and 
detects what should be redacted based on {{option}}.  However, when given as 
{{--option value}}, the terms {{option}} and {{value}} will be parsed 
separately and {{value}} will not be redacted.

As a consequence, any {{gfsh}} command executed with {{[command] --user 
username --password myPassword}} will be visible in plaintext in command 
history.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to