[JIRA] (JENKINS-36835) Change secret text field to textarea to support multiline text

2 views
Skip to first unread message

x@carsongee.com (JIRA)

unread,
Jul 20, 2016, 4:35:01 PM7/20/16
to jenkinsc...@googlegroups.com
Carson Gee created an issue
 
Jenkins / Improvement JENKINS-36835
Change secret text field to textarea to support multiline text
Issue Type: Improvement Improvement
Assignee: stephenconnolly
Components: credentials-plugin
Created: 2016/Jul/20 8:34 PM
Priority: Minor Minor
Reporter: Carson Gee

Currently the interface for StringBinding/Secret Text is an HTML input field, so when a multiple line secret is pasted in, the newlines replaced with spaces. Simply inspecting my browser and changing that field to textarea resolves that issue, so the backend seems to support them fine, just the interface could use a small tweak to support longer/larger secret strings.

Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c)
Atlassian logo

stephenconnolly@java.net (JIRA)

unread,
Jul 21, 2016, 6:49:01 AM7/21/16
to jenkinsc...@googlegroups.com

stephenconnolly@java.net (JIRA)

unread,
Jul 21, 2016, 6:49:03 AM7/21/16
to jenkinsc...@googlegroups.com
stephenconnolly updated an issue
Change By: stephenconnolly
Component/s: plain-credentials-plugin
Component/s: credentials-plugin

stephenconnolly@java.net (JIRA)

unread,
Jul 21, 2016, 6:52:01 AM7/21/16
to jenkinsc...@googlegroups.com
stephenconnolly updated an issue
Change By: stephenconnolly
Component/s: credentials-binding-plugin
Component/s: plain-credentials-plugin

jglick@cloudbees.com (JIRA)

unread,
Nov 7, 2016, 4:52:01 PM11/7/16
to jenkinsc...@googlegroups.com
Jesse Glick assigned an issue to Unassigned
Change By: Jesse Glick
Assignee: Jesse Glick

jglick@cloudbees.com (JIRA)

unread,
Nov 7, 2016, 4:52:01 PM11/7/16
to jenkinsc...@googlegroups.com
Jesse Glick updated an issue
Change By: Jesse Glick
Component/s: plain-credentials-plugin
Component/s: credentials-binding-plugin

jack.peterson@gmail.com (JIRA)

unread,
May 14, 2019, 5:05:02 PM5/14/19
to jenkinsc...@googlegroups.com
Jack Peterson commented on Improvement JENKINS-36835
 
Re: Change secret text field to textarea to support multiline text

Making the text-input a textarea does allow saving the secret text as multiline; however, the credentials are echoed out plain as day in the build logs ... effectively breaking the security model.

See https://issues.jenkins-ci.org/browse/JENKINS-57369 as an example where that scenario would occur.

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)
Reply all
Reply to author
Forward
0 new messages