luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/changelog/14744.txt

4 lines
108 B
Plaintext
Raw Permalink Normal View History

Ensure that URL encoded passwords are properly redacted. (#14744) The URL password redaction operation did not handle the case where the database connection URL was provided as a percent-encoded string, and its password component contained reserved characters. It attempted to redact the password by replacing the unescaped password in the percent-encoded URL. This resulted in the password being revealed when reading the configuration from Vault.
2022-03-29 14:33:55 +00:00
```release-note:bug
secrets/database: Ensure that a `connection_url` password is redacted in all cases.
```