Datasource passwords are displayed in plaintext in the changelog difference

[mtbutler07]

NetBox version

v3.6.1

Python version

3.10

Steps to Reproduce

1. Create a new git data source
2. Populate the username/password fields
3. A changelog record is created displaying the password in plain text

Expected Behavior

The password and other secret fields should be omitted or masked in the changelog difference

Observed Behavior

The password was shown in plain text

[DanSheps]

Thank you for opening a bug report. It seems that the described functionality is intended behavior. If you meant to open a feature request instead, please close this issue and open a new one using the feature request template. Otherwise, please revise your post above to elaborate on why you believe the observed behavior is flawed.

[mtbutler07]

Hi @DanSheps! Displaying the passwords in plain text is intended?
That doesn't seem to be consistent with the rest of the NetBox UI so it seemed like a bug to me.
Examples:

• Passwords are masked during user login
• User passwords are not visible from within the admin panel
• Salt and hashes are both masked in the admin panel

Otherwise, please revise your post above to elaborate on why you believe the observed behavior is flawed.

The observed behavior is flawed because credentials are being compromised to other users that can view the changelog when they could be omitted or masked like they are throughout the rest of the NetBox UI.

I'm more than happy to convert this to a feature request if that's the proper way forward. Just let me know.

[DanSheps]

This is intended, as it is the change log. No change log data is encrypted .

Please do open a FR

[mtbutler07]

Created FR #13729