Thanks for taking the time to report this.
My opinion is that because the list of files that could contain
passwords would be so vast, this is something best left up to the
individual user.
Here's something you can add to your vimrc which will disable viminfo
and undofile for a list of files (though it's not perfect - if you do
vim wp-config.php other-file.php, viminfo will be disabled for the
second file too):
if has("autocmd")
autocmd BufNewFile,BufRead wp-config.php,.my.cnf,my-password-file setl
viminfo= noundofile
endif
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/687281
Title:
viminfo can leak sensitive information
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs