Re: [yast-devel] Use URL::HidePassword() when logging an URL

2008-11-26 Thread Duncan Mac-Vicar Prett
Ladislav Slezak wrote: Fortunately libzypp hides the password by default so there should not be many places which logs a full URL. Yes, the asString method hides it, but there is one method available that display it as it is. Duncan -- To unsubscribe, e-mail: [EMAIL PROTECTED] For

Re: [yast-devel] Use URL::HidePassword() when logging an URL

2008-11-26 Thread Ladislav Slezak
Duncan Mac-Vicar Prett wrote: Ladislav Slezak wrote: Fortunately libzypp hides the password by default so there should not be many places which logs a full URL. Yes, the asString method hides it, but there is one method available that display it as it is. zypp::Url::asCompleteString() is

Re: [yast-devel] Use URL::HidePassword() when logging an URL

2008-11-26 Thread Stanislav Visnovsky
On Wednesday 26 November 2008 11:57:49 Arvin Schnell wrote: On Wed, Nov 26, 2008 at 11:47:53AM +0100, Stefan Hundhammer wrote: On Mittwoch, 26. November 2008, Ladislav Slezak wrote: And of course, this won't help if Y2DEBUG is enabled. We would need a new datatype or a flag in the

Re: [yast-devel] Use URL::HidePassword() when logging an URL

2008-11-26 Thread Arvin Schnell
On Wed, Nov 26, 2008 at 11:47:53AM +0100, Stefan Hundhammer wrote: On Mittwoch, 26. November 2008, Ladislav Slezak wrote: And of course, this won't help if Y2DEBUG is enabled. We would need a new datatype or a flag in the interpreter to fix it with Y2DEBUG enabled. I don't think this can

[yast-devel] Use URL::HidePassword() when logging an URL

2008-11-25 Thread Ladislav Slezak
Hi all, keep in mind that URL may contain a user name and a password. When an URL with password is logged to y2log the password should be hidden for security reasons (see bnc#441944). There are new functions URL::HidePassword() and URL::HidePasswordToken() for hiding the password in an URL