[JIRA] (JENKINS-59246) Password with cyrillic symbols and numbers not masked

3 views
Skip to first unread message

valentin.baranov@netcracker.com (JIRA)

unread,
Sep 5, 2019, 9:42:02 AM9/5/19
to jenkinsc...@googlegroups.com
Valentin Baranov created an issue
 
Jenkins / Bug JENKINS-59246
Password with cyrillic symbols and numbers not masked
Issue Type: Bug Bug
Assignee: Unassigned
Components: mask-passwords-plugin
Created: 2019-09-05 13:41
Priority: Major Major
Reporter: Valentin Baranov

Hello,

I have pipeline job with maven release plugin configured.

Username and password are provided as String Parameter & Password Parameter respectively, password is configured to be masked.

When latin symbols and digits are used in password, it is masked correctly. E.g. in log, we see:

mvn release:prepare release:perform -B -U -DreleaseVersion=1.2.3 -Dusername=<myusername> -Dpassword=********

If password contains any cyrillic symbols and digits, the following is shown in build log:

mvn release:prepare release:perform -B -U -DreleaseVersion=111.111.111 -Dusername=<myusername> -Dpassword=latin?????????123456

Here, the actual password string was "latinКириллица123456"

Also, when release-plugin fails, it shows errors like this:

fatal: Authentication failed for 'https://<login>:<pass>@<repoUrl>'

So for latin & digits password, the <pass> is shown masked as ******, but for both latin, cyrillic & digits, it becomes like this:

89%3F%3F%3F123456

and one can see unmasked part of the password in this URL.

Could you please fix it?

 

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

valentin.baranov@netcracker.com (JIRA)

unread,
Sep 24, 2019, 3:37:05 AM9/24/19
to jenkinsc...@googlegroups.com
This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo
Reply all
Reply to author
Forward
0 new messages