-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Prevent LDAP Password to appear in log file #32589
Conversation
@tomneedham @PVince81 @butonic Could you please review this? |
'tryLogin' | ||
'tryLogin', | ||
|
||
//bind |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
these comments look useless...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
They are, any suggestions how to improve them?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
no need to improve now
I was just pointing at the fact that the comment is exactly the same as the string itself, so doesn't have much value.
doesn't matter now, let's merge when CI is green
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
@voroyam please backport to stable10 |
stable10: #32592 |
If connection to LDAP server is lost, the LDAP password is shown in the stacktrace. This should prevent this from happening.
201a67e
to
21f0c99
Compare
rebased |
Codecov Report
@@ Coverage Diff @@
## master #32589 +/- ##
============================================
+ Coverage 64.14% 64.21% +0.07%
- Complexity 18672 18727 +55
============================================
Files 1177 1177
Lines 70275 70499 +224
Branches 1270 1270
============================================
+ Hits 45076 45273 +197
- Misses 24829 24856 +27
Partials 370 370
Continue to review full report at Codecov.
|
Regarding the comments about useless string - suggestion, mention that the two methods
|
If connection to LDAP server is lost, the LDAP password is shown in the stack trace.
This should prevent this from happening.