Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26955

API token can be extracted from config page after save

XMLWordPrintable

      Hi everyone,

      I've noticed that after I save API token at settings page, I can access the token under asterisk using browser's developer console. This is very insecure, token can be seen by anyone who has access to settings. I suspect GitHub shows token only once due to security risks as well.

          [JENKINS-26955] API token can be extracted from config page after save

          There are no comments yet on this issue.

            Unassigned Unassigned
            lunaticare Dmitry P
            Votes:
            1 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: