[JIRA] Commented: (JENKINS-7447) Rebuild plugin shows passwords as plain text

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[JIRA] Commented: (JENKINS-7447) Rebuild plugin shows passwords as plain text

JIRA noreply@jenkins-ci.org

    [ http://issues.jenkins-ci.org/browse/JENKINS-7447?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=146604#comment-146604 ]

rseguy commented on JENKINS-7447:

Hey Ragesh,

Yes, Hudson's built-in password params are no more accessible now, so I'm ok with the closing of this issue.

What could be improved anyway is that the plugin now only handles Hudson's built-in params, and not params coming from other plugins (like in the solution I was proposing).

> Rebuild plugin shows passwords as plain text
> --------------------------------------------
>                 Key: JENKINS-7447
>                 URL: http://issues.jenkins-ci.org/browse/JENKINS-7447
>             Project: Jenkins
>          Issue Type: Bug
>          Components: rebuild
>    Affects Versions: current
>            Reporter: rseguy
>            Assignee: ragesh_nair
>            Priority: Critical
>             Fix For: current
> If a job has a password parameter, then this password parameter is included in the rebuild URL (e.g. {{https://.../hudson/job/SampleRebuild/buildWithParameters?USER=xxx&PASSWD=yyy}}) and is then available as plain text.

This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira