[JIRA] (JENKINS-40017) Passwords are replaced but not masked in global envs

[bochenski.kuba+jenk...@gmail.com (JIRA)]

Title: Message Title

Jakub Bochenski updated an issue   Jenkins / JENKINS-40017 Passwords are replaced but not masked in global envs Change By: Jakub Bochenski We have a global password called {{JENKINSPASS}} We have a global env {{ANT_OPTS}} defined with , which references it like {{-Djavax.net.ssl.keyStorePassword=$\{JENKINSPASS\}}} For no apparent reason (we didn't upgrade) an unmasked value of the password started to appear in "Enviorment Variables" view. Note {{JENKINSPASS}} itself is not masked. {code} ANT_OPTS -Djavax.net.ssl.keyStorePassword=N0wC0mpr0miss3dS3cr3t JENKINSPASS [*******] {code} Older builds don't contain an entry for ANT_OPTS at all. Add Comment   This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.