[issue855] hg {pull,push} shows passwords

Krzysiek Pawlik mercurial-bugs at selenic.com
Tue Dec 4 12:53:22 CST 2007


New submission from Krzysiek Pawlik <krzysiek.pawlik at people.pl>:

During `hg pull' and `hg push' hg displays message with full URL, with user name
and password. Attached patch fixes this by masking it with *password*.

When you'd like to showcase mercurial to somebody and use username:password in
URL then it will be shown, which is bad.

----------
files: commands.py.patch
messages: 4468
nosy: nelchael
priority: bug
status: unread
title: hg {pull,push} shows passwords
topic: patch, security, ui

____________________________________________________
Mercurial issue tracker <mercurial-bugs at selenic.com>
<http://www.selenic.com/mercurial/bts/issue855>
____________________________________________________
-------------- next part --------------
A non-text attachment was scrubbed...
Name: commands.py.patch
Type: text/x-diff
Size: 800 bytes
Desc: not available
Url : http://selenic.com/pipermail/mercurial-devel/attachments/20071204/c8193295/attachment.patch 


More information about the Mercurial-devel mailing list