Colm O hEigeartaigh created KARAF-7537: ------------------------------------------
Summary: Password displayed in console using repo-list Key: KARAF-7537 URL: https://issues.apache.org/jira/browse/KARAF-7537 Project: Karaf Issue Type: Wish Affects Versions: 4.3.7 Reporter: Colm O hEigeartaigh If you add a feature repository with a user credential, e.g.: {code:java} repo-add mvn:https://user:passw...@repo1.maven.org/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features {code} Then Karaf displays the password in full in the console with: {code:java} repo-list | grep password cxf-3.5.3 │ mvn:https://user:passw...@repo1.maven.org/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features {code} For repos that contain a password, it would be more secure if the password was redacted for logging/display purposes. -- This message was sent by Atlassian Jira (v8.20.10#820010)