[
https://issues.apache.org/jira/browse/NIFI-14282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17928900#comment-17928900
]
ASF subversion and git services commented on NIFI-14282:
--------------------------------------------------------
Commit a51f1d4802c37bde0efeb390d621b21091a3c179 in nifi's branch
refs/heads/main from Matt Gilman
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=a51f1d4802 ]
NIFI-14282 Enforced that pasted property descriptor is sensitive before
applying a sensitive property value (#9734)
Signed-off-by: David Handermann <[email protected]>
> Sensitive dynamic property values revealed by manipulating clipboard copy
> -------------------------------------------------------------------------
>
> Key: NIFI-14282
> URL: https://issues.apache.org/jira/browse/NIFI-14282
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
> Affects Versions: 2.2.0
> Reporter: Gabriel Orstadius-Bui
> Assignee: Matt Gilman
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Relates to https://issues.apache.org/jira/browse/NIFI-13975
> How to reproduce:
> # Create an InvokeHTTP processor with a dynamic sensitive property
> # Copy the processor to the clipboard
> # Paste clipboard content in a text editor
> # In the text editor, edit the property descriptor for the dynamic property
> so as "sensitive" is set to "false" instead of "true"
> # Copy the manipulated content from the text editor
> # Paste back into NiFi
> # The newly pasted processor now reveals the value of the sensitive property
> we set in step 1!
> Note: This (of course) only happens if copying and pasting within the same
> NiFi instance.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
