You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Michael Osipov (JIRA)" <ji...@apache.org> on 2017/01/03 22:05:58 UTC

[jira] [Closed] (WAGON-481) Sensitive (auth) information is not cleared when HttpClientWagon is disconnected

     [ https://issues.apache.org/jira/browse/WAGON-481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Osipov closed WAGON-481.
--------------------------------
    Resolution: Fixed

Fixed with [7fd0dca33656e5f961e9234258db9e3a2cec0d9f |https://git-wip-us.apache.org/repos/asf?p=maven-wagon.git;a=commit;h=7fd0dca33656e5f961e9234258db9e3a2cec0d9f].

> Sensitive (auth) information is not cleared when HttpClientWagon is disconnected
> --------------------------------------------------------------------------------
>
>                 Key: WAGON-481
>                 URL: https://issues.apache.org/jira/browse/WAGON-481
>             Project: Maven Wagon
>          Issue Type: Bug
>          Components: wagon-http
>    Affects Versions: 2.11
>            Reporter: Michael Osipov
>            Assignee: Michael Osipov
>             Fix For: 2.12
>
>
> {{AuthCache}} and {{CredentialsProvider}} are never cleared when {{Wagon#disconnect()}} is called which may leave sensitive information in memory.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)