We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The nextcloud.occ config:list outputs the object storage credentials in plaintext
nextcloud.occ config:list
The Issue Debugging Script relies on this command and this can lead to posting access credentials publicly.
Credentials get removed/replaced with ***REMOVED SENSITIVE VALUE*** as it is done for the passwordsalt and secret field (amoung others).
***REMOVED SENSITIVE VALUE***
passwordsalt
secret
Key and Secret are shown.
"objectstore": { "class": "OC\\Files\\ObjectStore\\S3", "arguments": { "bucket": "mydata.nextcloud.myDomain.tld", "region": "eu-central-1", "autocreate": true, "key": "<Key was included in plaintext>", "secret": "<Secret was included in plaintext>", "use_ssl": true } }, "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***",
Issue first opend for the debugging script in nextcloud-snap, however it should fit better here. nextcloud-snap/nextcloud-snap#1150
The text was updated successfully, but these errors were encountered:
Successfully merging a pull request may close this issue.
The
nextcloud.occ config:list
outputs the object storage credentials in plaintextThe Issue Debugging Script relies on this command and this can lead to posting access credentials publicly.
Steps to reproduce
nextcloud.occ config:list
Expected behaviour
Credentials get removed/replaced with
***REMOVED SENSITIVE VALUE***
as it is done for thepasswordsalt
andsecret
field (amoung others).Actual behaviour
Key and Secret are shown.
Output
Issue first opend for the debugging script in nextcloud-snap, however it should fit better here.
nextcloud-snap/nextcloud-snap#1150
The text was updated successfully, but these errors were encountered: