[ 
https://issues.apache.org/jira/browse/KARAF-7537?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jean-Baptiste Onofré reassigned KARAF-7537:
-------------------------------------------

    Assignee: Jean-Baptiste Onofré

> Password displayed in console using repo-list
> ---------------------------------------------
>
>                 Key: KARAF-7537
>                 URL: https://issues.apache.org/jira/browse/KARAF-7537
>             Project: Karaf
>          Issue Type: Wish
>    Affects Versions: 4.3.7
>            Reporter: Colm O hEigeartaigh
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>
> If you add a feature repository with a user credential, e.g.:
> {code:java}
> repo-add 
> mvn:https://user:[email protected]/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features
>  {code}
> Then Karaf displays the password in full in the console with:
> {code:java}
>  repo-list | grep password
> cxf-3.5.3                         │ 
> mvn:https://user:[email protected]/maven2!org.apache.cxf.karaf/apache-cxf/3.5.3/xml/features
>  {code}
> For repos that contain a password, it would be more secure if the password 
> was redacted for logging/display purposes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to