[PATCH] hide passwords in httprepo error messages

Patrick Mézard pmezard at gmail.com
Sun Apr 12 09:06:31 CDT 2009


Steve Borho a écrit :
> # HG changeset patch
> # User Steve Borho <steve at borho.org>
> # Date 1239492861 18000
> # Node ID a9bc0242f1e3c607f06f78b94542917b39116404
> # Parent  db3a68fd9387d10308148bbf1a18c89bf50ce96d
> hide passwords in httprepo error messages

Nice catch.

Shouldn't we extend this to status()/debug() messages too? 
Looking at the code, I would hide passwords in the "cu" and "resp_url" variables too, and patch against -stable.

--
Patrick Mézard


More information about the Mercurial-devel mailing list