[JIRA] (JENKINS-59850) Use of toString() on hudson.util.Secret from hudson.util.jelly.MorphTagLibrary$1.run(MorphTagLibrary.java:91)

jsoref+jenkins@gmail.com (JIRA)

unread,

Oct 18, 2019, 2:02:02 PM10/18/19

to jenkinsc...@googlegroups.com

Josh Soref created an issue

Jenkins /

JENKINS-59850

Use of toString() on hudson.util.Secret from hudson.util.jelly.MorphTagLibrary$1.run(MorphTagLibrary.java:91)

Issue Type:	Bug
Assignee:	Unassigned
Components:	core
Created:	2019-10-18 18:01
Priority:	Minor
Reporter:	Josh Soref

 
                                                                Use of toString() on hudson.util.Secret from hudson.util.jelly.MorphTagLibrary$1.run(MorphTagLibrary.java:91). Prefer getPlainText() or getEncryptedValue() depending your needs. see https://jenkins.io/redirect/hudson.util.Secret/

https://github.com/jenkinsci/jenkins/blob/22aa2e6e766074d11249893e3f35e0b99e20d3d0/core/src/main/java/hudson/util/jelly/MorphTagLibrary.java#L91

Add Comment

This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)

dbeck@cloudbees.com (JIRA)

unread,

Oct 19, 2019, 10:07:12 AM10/19/19

to jenkinsc...@googlegroups.com

Daniel Beck commented on

JENKINS-59850

Re: Use of toString() on hudson.util.Secret from hudson.util.jelly.MorphTagLibrary$1.run(MorphTagLibrary.java:91)

Sadly one of the locations in the code where that log message is unhelpful. Nicolas didn't care though: https://github.com/jenkinsci/jenkins/pull/3668

As you filed this as a bug, what is the behavior you'd expect to see here? Because I can tell you already that this kind of invocation cannot be removed.