Skip to content

fix: remove config file path from login page#7709

Merged
code-asher merged 1 commit intocoder:mainfrom
karesansui-u:fix/remove-config-path-from-login
Mar 18, 2026
Merged

fix: remove config file path from login page#7709
code-asher merged 1 commit intocoder:mainfrom
karesansui-u:fix/remove-config-path-from-login

Conversation

@karesansui-u
Copy link
Contributor

Fixes #7643

The login page displayed the full config file path (e.g.
/home/username/.config/code-server/config.yaml), exposing the
username and system layout to anyone who can see the page.

The path is already printed in the CLI output at startup, so
showing it on the login page is unnecessary. Removed the
{{configFile}} interpolation from all locale files.

The login page displayed the full config file path (e.g.
/home/username/.config/code-server/config.yaml), which exposes
the username and system layout to anyone who can see the page.

The path is already printed in the CLI output when starting
code-server, so showing it on the login page is unnecessary.

Fixes coder#7643
@karesansui-u karesansui-u requested a review from a team as a code owner March 16, 2026 15:31
Copy link
Member

@code-asher code-asher left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@code-asher code-asher merged commit d7599ae into coder:main Mar 18, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Welcome screen leaks (slightly) security relevant information

2 participants