[regression] Effective settings as visible to plugins contain plain text 
passwords
----------------------------------------------------------------------------------

                 Key: MNG-4459
                 URL: http://jira.codehaus.org/browse/MNG-4459
             Project: Maven 2
          Issue Type: Bug
          Components: Settings
    Affects Versions: 3.0-alpha-4
            Reporter: Benjamin Bentmann


When we introduced MNG-553, the passwords were only decrypted at the transport 
layer and the {{Settings}} instance kept in memory was kept encrypted. E.g. to 
save plugins from accidentally dumping the plain text passwords on the console 
or such.

This does currently not hold for 3.0-alpha-4 as 
{{org.apache.maven.plugin:maven-help-plugin:2.0:effective-settings}} shows.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to