Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

maven-car-deploy-plugin logs cleartext passwords into output #18

Open
sumsum77 opened this issue Dec 1, 2017 · 0 comments
Open

maven-car-deploy-plugin logs cleartext passwords into output #18

sumsum77 opened this issue Dec 1, 2017 · 0 comments

Comments

@sumsum77
Copy link

sumsum77 commented Dec 1, 2017

Description:
macen-car-deploy-plugin writes passwords onto console output in clear text.
Do not print clear text passwords into console in method org.wso2.maven.car.artifact.DeployCarMojo#execute

  • TSPWD (TrustStorePassword)
  • Password (User Password)

Remove Method org.wso2.maven.car.artifact.DeployCarMojo#printParams as it should only be used for debugging purposes.

Suggested Labels:

Suggested Assignees:

Affected Product Version:
1.2.0, 1.2.1-SNAPSHOT

OS, DB, other environment details and versions:

Steps to reproduce:
Use maven-car-deploy-plugin, find passwords on console output

Related Issues:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant