Skip to content

Conversation

@Mpdreamz
Copy link
Member

@Mpdreamz Mpdreamz commented Nov 6, 2018

Passing username/pass in the Node Uri directly bleeds into DebugInformation.

If you use BasicAuthentication(username, password) on ConnectionSettings which is the recommended route this does not happen.

response.DebugInformation.Should().Contain("Valid NEST response");
}
//hide
[U] public void PasswordIsNotExposedInDebugInformation()
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Notice we have spaces here, since *.doc.cs have formatter off this was not fixed as part of our recent automated code cleanup commits. We really need a order file off mechanism but I have not found a way to do that in file comments or editorconfig setting. Will tweet @ jetBrainsRider to see if I missed anything and will fix this on my plane ride home for the active integration branches manually.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should now be fixed on `master" and this PR

Copy link
Contributor

@russcam russcam left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Passing username/pass in the node URI directly bleeds into DebugInformation.

If you use BasicAuthentication(username, password) on ConnectionSettings which is the recomended route

this does not happen.
@Mpdreamz Mpdreamz force-pushed the fix/userinfo-in-url-directly-audit branch from 5df9491 to 9c52141 Compare November 14, 2018 10:04
@Mpdreamz Mpdreamz merged commit 7fc9ca0 into master Nov 14, 2018
Mpdreamz added a commit that referenced this pull request Nov 14, 2018
* Fix #3485

Passing username/pass in the node URI directly bleeds into DebugInformation.

If you use BasicAuthentication(username, password) on ConnectionSettings which is the recomended route

this does not happen.

* fix tabs in DebugInformation.doc.cs

* bad merge

(cherry picked from commit 7fc9ca0)
@Mpdreamz Mpdreamz deleted the fix/userinfo-in-url-directly-audit branch November 14, 2018 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants