[JIRA] (JENKINS-53371) Credentials user/pw shown in plain text using bash and single quote

[lostinberlin2...@gmail.com (JIRA)]

Title: Message Title

Steve Boardwell created an issue   Jenkins / JENKINS-53371 Credentials user/pw shown in plain text using bash and single quote Issue Type: Bug Assignee: Unassigned Components: credentials-binding-plugin Created: 2018-08-31 12:31 Priority: Major Reporter: Steve Boardwell Problem Username and Password credentials are being shown in plain text when: single quote is contained in the username and/or password bash is used as a shell How to reproduce Pipeline expects some credentials with ID 'both-user-and-pw' containing single quotes, for example, username = "user'name", password = "pass'word" (Given, username with a single quote are not to be expected, but for the sake of completeness...) node('master') { try { withCredentials([usernamePassword(credentialsId: 'both-user-and-pw', passwordVariable: 'myPw', usernameVariable: 'myUser')]) { echo '-------------------------------------------' echo "WORKING: Normal 'sh' step masks credentials" echo '-------------------------------------------' sh 'echo "user=${myUser} password=${myPw}"' echo '-------------------------------------------' echo "WORKAROUND: 'bash' without 'set -x' credentials." echo '-------------------------------------------' sh '#!/bin/bash\necho "user=${myUser} password=${myPw}"' echo '-------------------------------------------' echo "BUG: 'bash' with 'set -x' credentials." echo '-------------------------------------------' sh '#!/bin/bash\nset -x\necho "user=${myUser} password=${myPw}"' } } finally { cleanWs() } } Results in: ------------------------------------------- [Pipeline] echo WORKING: Normal 'sh' step masks credentials [Pipeline] echo ------------------------------------------- [Pipeline] sh [EXP-steve-pipeline-test] Running shell script + echo user=**** password=**** user=**** password=**** [Pipeline] echo ------------------------------------------- [Pipeline] echo WORKAROUND: 'bash' without 'set -x' credentials. [Pipeline] echo ------------------------------------------- [Pipeline] sh [EXP-steve-pipeline-test] Running shell script user=**** password=**** [Pipeline] echo ------------------------------------------- [Pipeline] echo BUG: 'bash' with 'set -x' credentials. [Pipeline] echo ------------------------------------------- [Pipeline] sh [EXP-steve-pipeline-test] Running shell script + echo 'user=user'\''name password=pass'\''word' user=**** password=**** Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.