Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NuGetV2: avoid revealing password also if more than one source is defined #1357

Merged
merged 1 commit into from
Jan 8, 2016

Conversation

cdrnet
Copy link
Member

@cdrnet cdrnet commented Jan 8, 2016

Minor regression on the fix from #1238 to protect personal passwords from being revealed in logs and the shell. In case of multiple sources it fell back to the original unprocessed sources and thus bypass the ToString override.

@cdrnet cdrnet changed the title Security: NuGetV2: avoid revealing password also if more than one source is defined NuGetV2: avoid revealing password also if more than one source is defined Jan 8, 2016
@forki
Copy link
Member

forki commented Jan 8, 2016

ouch. thx

forki added a commit that referenced this pull request Jan 8, 2016
NuGetV2: avoid revealing password also if more than one source is defined
@forki forki merged commit 82b396e into fsprojects:master Jan 8, 2016
@cdrnet
Copy link
Member Author

cdrnet commented Jan 8, 2016

Great, thanks!

@cdrnet cdrnet deleted the dont-leak-password2 branch January 8, 2016 12:41
@Vilmir
Copy link

Vilmir commented Jan 12, 2016

Thanks for solving this! We are then going to adopt Paket in our company 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants