You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I understand that AWX is open source software provided for free and that I might not receive a timely response.
I am NOT reporting a (potential) security vulnerability. (These should be emailed to security@ansible.com instead.)
Bug Summary
When using survey feature on Tech Preview UI the "password" survey type question is presenting the variable value within the "Review" page when launching a template. Interestingly enough if i set a "Default answer" for the "password" type in the survey i see the proper "$encrypted$" value when presented on the "Review" page.
AWX version
24.3.1
Select the relevant components
UI
UI (tech preview)
API
Docs
Collection
CLI
Other
Installation method
openshift
Modifications
no
Ansible version
No response
Operating system
No response
Web browser
Firefox
Steps to reproduce
Navigate to Tech Preview UI
Launch existing template with survey feature enabled
Enter survey values and select next
On "Review" page under "extra vars" you can see the password type var in clear text
Expected results
Expecting to see the extra var section showing "$encrypted$" for the password value.
Actual results
The extra var section showing unencrypted value for the password value.
Additional information
Test Template Survey - Password Question
Test Template Survey - Survey prompting for password
Test Template Survey - Survey displaying extravars password in plain text
Test Template Survey - Survey displaying extravars password encrypted (when using "default answer" option)
The text was updated successfully, but these errors were encountered:
Please confirm the following
security@ansible.com
instead.)Bug Summary
When using survey feature on Tech Preview UI the "password" survey type question is presenting the variable value within the "Review" page when launching a template. Interestingly enough if i set a "Default answer" for the "password" type in the survey i see the proper "$encrypted$" value when presented on the "Review" page.
AWX version
24.3.1
Select the relevant components
Installation method
openshift
Modifications
no
Ansible version
No response
Operating system
No response
Web browser
Firefox
Steps to reproduce
Expected results
Expecting to see the extra var section showing "$encrypted$" for the password value.
Actual results
The extra var section showing unencrypted value for the password value.
Additional information
Test Template Survey - Password Question
![Test-Bug-0](https://private-user-images.githubusercontent.com/37527320/335487258-70d57820-faef-4fdf-9e01-569061ed9038.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjQzNjY5NjcsIm5iZiI6MTcyNDM2NjY2NywicGF0aCI6Ii8zNzUyNzMyMC8zMzU0ODcyNTgtNzBkNTc4MjAtZmFlZi00ZmRmLTllMDEtNTY5MDYxZWQ5MDM4LnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MjIlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODIyVDIyNDQyN1omWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTA1M2FlMzQ0YzdmNGZjOWVlZWIyYjU4NWVhNTU1ZDI4MDRlN2I2MjVlMDkyYjczODdmZDZmYWRmMzU4MjU1ZjkmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.s3A3Uoc3BthhKej0gmTCRupeehXOz7h3FLZGIQgnOGk)
Test Template Survey - Survey prompting for password
![Test-Bug-1](https://private-user-images.githubusercontent.com/37527320/335487272-9aa94473-55bf-4a7e-b36a-be9406f20818.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.6r1hA2XpltEKS9k23aQ4Gn9zsZkuKZq9bWK_cSBvHWE)
Test Template Survey - Survey displaying extravars password in plain text
![Test-Bug-2](https://private-user-images.githubusercontent.com/37527320/335487276-52e3b719-65e2-46a3-b8a1-0718e9b91f7c.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Zvbxcek4o-fqV2gpE0o-jggemhX4D7-HfSFrHiITVKA)
Test Template Survey - Survey displaying extravars password encrypted (when using "default answer" option)
![Test-Bug-3](https://private-user-images.githubusercontent.com/37527320/335487281-246cabd6-8a35-4166-a3be-6cee0ac6ee56.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NcuYSnZCeYDWMpy8SCiJ1sO2QPZqdghamSP6a_p-PXg)
The text was updated successfully, but these errors were encountered: