[ 
https://issues.apache.org/jira/browse/FELIX-6570?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17616430#comment-17616430
 ] 

Carsten Ziegeler commented on FELIX-6570:
-----------------------------------------

[~laeubi] Not disagreeing - in that sense there is no difference between a 
private property and a property marked as password by metatype. All are hints, 
but we can only support to a point that makes sense.
If you look at the web console, the part dealing with OSGi configurations is 
already using the metatype approach for several years. Its not perfect, but its 
better than ignoring the metatype hint.
So in that sense, I think we should use the metatype hint and maybe also not 
display private properties

> Components webconsole-plugin shows password in clear text
> ---------------------------------------------------------
>
>                 Key: FELIX-6570
>                 URL: https://issues.apache.org/jira/browse/FELIX-6570
>             Project: Felix
>          Issue Type: Bug
>          Components: Web Console
>    Affects Versions: webconsole-ds-plugin-2.1.0
>            Reporter: Sagar Miglani
>            Priority: Major
>         Attachments: Screenshot 2022-05-09 at 4.48.42 PM.png, 
> webconsole-plugins.patch
>
>
> Open a component details page (eg: 
> localhost:8080/system/console/components/${componentId}) for a component with 
> a Password Property.
> Passwords are shown in clear text. [^Screenshot 2022-05-09 at 4.48.42 PM.png]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to