Skip to content

Password disclosure in _raise_byteswarning() #144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
tiran opened this issue Dec 19, 2017 · 0 comments
Closed

Password disclosure in _raise_byteswarning() #144

tiran opened this issue Dec 19, 2017 · 0 comments
Assignees
@encukou
Milestone
3.0

Comments

@tiran
Copy link
Member

tiran commented Dec 19, 2017

_raise_byteswarning() helper function now includes the value in the warning message. This may disclose sensitive information like passwords or attributes in server logs.
@encukou encukou self-assigned this Dec 19, 2017
encukou added a commit to encukou/python-ldap that referenced this issue Dec 19, 2017
@encukou
Show argument name instead of content in LDAPBytesWarning
2a6c8ba 
Based on earlier patch by Christian Heimes
Fixes: python-ldap#132
Fixes: python-ldap#144
@encukou encukou mentioned this issue Dec 19, 2017
Merged
@encukou encukou added this to the 3.0 milestone Dec 19, 2017
encukou added a commit that referenced this issue Dec 20, 2017
@encukou
Show argument name instead of content in LDAPBytesWarning
9fb9338 
Based on earlier patch by Christian Heimes
#145
Fixes: #132
Fixes: #144
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@encukou encukou

Labels
None yet
Projects
None yet
Milestone
3.0
Development

No branches or pull requests
2 participants
@encukou @tiran