Skip to content
This repository has been archived by the owner on Apr 17, 2023. It is now read-only.

webhooks: hide passwords #1111

Merged
merged 1 commit into from
Oct 26, 2016
Merged

webhooks: hide passwords #1111

merged 1 commit into from
Oct 26, 2016

Conversation

monstermunchkin
Copy link
Contributor

Signed-off-by: Thomas Hipp [email protected]

@@ -21,6 +21,6 @@
th Password
td
- if webhook.password.present?
= webhook.password
= '*' * webhook.password.length
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why expose the length of the password? I would use a static or random length.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

And why not using a random number from 0 to 10 for example ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I doesn't really matter if it's a random or fixed length. The fixed length string however is really easy to implement.

Signed-off-by: Thomas Hipp <[email protected]>
@@ -21,6 +21,6 @@
th Password
td
- if webhook.password.present?
= webhook.password
= '*' * 11
Copy link
Contributor

@tboerger tboerger Oct 26, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

And are you sure we never want to display it? Maybe make it toggleable?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would never ever show it. This is asking for trouble imho 😄

Copy link
Collaborator

@mssola mssola left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Just wait for travis and you can then merge it yourself 😉

@monstermunchkin monstermunchkin merged commit 49485b0 into SUSE:master Oct 26, 2016
@monstermunchkin monstermunchkin deleted the hide-webhooks-password branch October 26, 2016 14:00
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants