-
Notifications
You must be signed in to change notification settings - Fork 472
webhooks: hide passwords #1111
webhooks: hide passwords #1111
Conversation
@@ -21,6 +21,6 @@ | |||
th Password | |||
td | |||
- if webhook.password.present? | |||
= webhook.password | |||
= '*' * webhook.password.length |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why expose the length of the password? I would use a static or random length.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
And why not using a random number from 0 to 10 for example ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I doesn't really matter if it's a random or fixed length. The fixed length string however is really easy to implement.
Signed-off-by: Thomas Hipp <[email protected]>
@@ -21,6 +21,6 @@ | |||
th Password | |||
td | |||
- if webhook.password.present? | |||
= webhook.password | |||
= '*' * 11 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
And are you sure we never want to display it? Maybe make it toggleable?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would never ever show it. This is asking for trouble imho 😄
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. Just wait for travis and you can then merge it yourself 😉
Signed-off-by: Thomas Hipp [email protected]