[ 
https://issues.apache.org/jira/browse/HIVE-12282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14977773#comment-14977773
 ] 

Thejas M Nair commented on HIVE-12282:
--------------------------------------

Looks great, thanks for adding the test. However, I think "stripped" (instead 
of "striped") is the right word here . cc [~leftylev]
While you are at it, how about using a package private 'final string' for the 
"[passwd striped]" string so that it can be referenced from the test case. 
(Just so that a change in string does not break the test).


> beeline - update command printing in verbose mode
> -------------------------------------------------
>
>                 Key: HIVE-12282
>                 URL: https://issues.apache.org/jira/browse/HIVE-12282
>             Project: Hive
>          Issue Type: Bug
>          Components: Beeline
>            Reporter: Daniel Dai
>            Assignee: Daniel Dai
>             Fix For: 2.0.0
>
>         Attachments: HIVE-12282.1.patch
>
>
> In verbose mode, beeline prints the password used in commandline to STDERR. 
> This is not a good security practice. 
> Issue is in BeeLine.java code -
> {code}
>     if (url != null) {
>       String com = "!connect "
>           + url + " "
>           + (user == null || user.length() == 0 ? "''" : user) + " "
>           + (pass == null || pass.length() == 0 ? "''" : pass) + " "
>           + (driver == null ? "" : driver);
>       debug("issuing: " + com);
>       dispatch(com);
>     }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to