🔒 Do not expose KeePass password in spawned process (#801)

asbru-cm · Apr 4, 2021 · 036cf2e · 036cf2e
1 parent dacd5d9
commit 036cf2e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/asbru_conn b/lib/asbru_conn
@@ -217,6 +217,8 @@ if ($$CFG{'defaults'}{'keepass'}{'use_keepass'}) {
             die "$PASS";
         }
     }
+    # Makes sure the KeePass password is not exposed in the spawned process
+    delete $ENV{'KPXC_MP'};
 } else {
     if ($AUTH eq 'publickey') {
         $PASSPHRASE = subst($PASSPHRASE);