You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Benjamin Bentmann (JIRA)" <ji...@codehaus.org> on 2009/11/20 14:37:55 UTC
[jira] Created: (MNG-4459) [regression] Effective settings as
visible to plugins contain plain text passwords
[regression] Effective settings as visible to plugins contain plain text passwords
----------------------------------------------------------------------------------
Key: MNG-4459
URL: http://jira.codehaus.org/browse/MNG-4459
Project: Maven 2
Issue Type: Bug
Components: Settings
Affects Versions: 3.0-alpha-4
Reporter: Benjamin Bentmann
When we introduced MNG-553, the passwords were only decrypted at the transport layer and the {{Settings}} instance kept in memory was kept encrypted. E.g. to save plugins from accidentally dumping the plain text passwords on the console or such.
This does currently not hold for 3.0-alpha-4 as {{org.apache.maven.plugin:maven-help-plugin:2.0:effective-settings}} shows.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MNG-4459) [regression] Effective settings as
visible to plugins contain plain text passwords
Posted by "Benjamin Bentmann (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MNG-4459?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Benjamin Bentmann closed MNG-4459.
----------------------------------
Resolution: Fixed
Fix Version/s: 3.0-alpha-5
Assignee: Benjamin Bentmann
Fixed in [r882580|http://svn.apache.org/viewvc?view=revision&revision=882580].
> [regression] Effective settings as visible to plugins contain plain text passwords
> ----------------------------------------------------------------------------------
>
> Key: MNG-4459
> URL: http://jira.codehaus.org/browse/MNG-4459
> Project: Maven 2
> Issue Type: Bug
> Components: Settings
> Affects Versions: 3.0-alpha-4
> Reporter: Benjamin Bentmann
> Assignee: Benjamin Bentmann
> Fix For: 3.0-alpha-5
>
>
> When we introduced MNG-553, the passwords were only decrypted at the transport layer and the {{Settings}} instance kept in memory was kept encrypted. E.g. to save plugins from accidentally dumping the plain text passwords on the console or such.
> This does currently not hold for 3.0-alpha-4 as {{org.apache.maven.plugin:maven-help-plugin:2.0:effective-settings}} shows.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira