Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16016

Global passwords are visible for matrix configuration builds

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • envinject-plugin
    • None
    • jenkins core 1.492
      envinject 1.73

      I have environment variables defined as 'Global passwords' in matrix job configuration visible with upgrade to envinject 1.73.
      Previously there were links to 'Injected Environment Variables' only for the configurations of matrix project, e.g.:
      $JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/arch=arch1/injectedEnvVars/?
      With 1.73 update the 'Injected Environment Variables' link appeared for the parent builds, e.g.:
      $JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/injectedEnvVars/?
      And the environment variables defined as 'Global Passwords' are visible in plain text here.

          [JENKINS-16016] Global passwords are visible for matrix configuration builds

          Code changed in jenkins
          User: Gregory Boissinot
          Path:
          src/main/java/org/jenkinsci/plugins/envinject/EnvInjectListener.java
          src/test/java/org/jenkinsci/plugins/envinject/EnvInjectPasswordMatrixProjectTest.java
          http://jenkins-ci.org/commit/envinject-plugin/00a86cfc413b4f9b3b26eb8d2bade66d8d3d3941
          Log:
          Fix JENKINS-16016

          Compare: https://github.com/jenkinsci/envinject-plugin/compare/40f6f9cd1782...00a86cfc413b

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Gregory Boissinot Path: src/main/java/org/jenkinsci/plugins/envinject/EnvInjectListener.java src/test/java/org/jenkinsci/plugins/envinject/EnvInjectPasswordMatrixProjectTest.java http://jenkins-ci.org/commit/envinject-plugin/00a86cfc413b4f9b3b26eb8d2bade66d8d3d3941 Log: Fix JENKINS-16016 Compare: https://github.com/jenkinsci/envinject-plugin/compare/40f6f9cd1782...00a86cfc413b

            gbois Gregory Boissinot
            nnau Natalia Naumova
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: