-
Bug
-
Resolution: Fixed
-
Major
-
None
-
jenkins core 1.492
envinject 1.73
I have environment variables defined as 'Global passwords' in matrix job configuration visible with upgrade to envinject 1.73.
Previously there were links to 'Injected Environment Variables' only for the configurations of matrix project, e.g.:
$JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/arch=arch1/injectedEnvVars/?
With 1.73 update the 'Injected Environment Variables' link appeared for the parent builds, e.g.:
$JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/injectedEnvVars/?
And the environment variables defined as 'Global Passwords' are visible in plain text here.
Code changed in jenkins
User: Gregory Boissinot
Path:
src/main/java/org/jenkinsci/plugins/envinject/EnvInjectListener.java
src/test/java/org/jenkinsci/plugins/envinject/EnvInjectPasswordMatrixProjectTest.java
http://jenkins-ci.org/commit/envinject-plugin/00a86cfc413b4f9b3b26eb8d2bade66d8d3d3941
Log:
Fix
JENKINS-16016Compare: https://github.com/jenkinsci/envinject-plugin/compare/40f6f9cd1782...00a86cfc413b