GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Plaintext credential is exposed in CommandError if Authorization is passed in http.extraHeader · Issue #1626 · gitpython-developers/GitPython

Plaintext credential is exposed in CommandError if Authorization is passed in http.extraHeader #1626

New issue
Copy link
New issue
Copy link
Closed
Bug
#2188
Closed
Plaintext credential is exposed in CommandError if Authorization is passed in http.extraHeader#1626
Bug
#2188
Copy link
Labels
acknowledgedcriticalhelp wanted

Description

@el-bri-ga
el-bri-ga
opened on Aug 3, 2023
Issue body actions

If credentials are passed in the URI, e.g. https://user:[email protected]/bar.git then the credential is properly removed from the cmdline in the exception, but if an authorization header is set via http.extraHeader then the credential is not stripped from the exception.

Activity

  1. Byron
    added
    acknowledged
    help wanted
    on Aug 4, 2023

  2. Byron commented on Aug 4, 2023

    @Byron
    Byron
    on Aug 4, 2023
    Member
    More actions

    I acknowledge this issue tentatively as the issue is related to security, but wish there would be steps that help to reproduce it as well.

    A potential fix could use that to setup a test for reproduction, along with the fix.

  3. Byron
    added the
    Bug
    issue type on Jul 20, 2026
  4. Byron
    added
    critical
    on Jul 20, 2026
  5. Byron
    closed this as completedin #2188on Jul 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    acknowledgedcriticalhelp wanted

    Type

    Bug

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions
      You are visitor 01402503 — GeezerVison does not store the pages you look up.
      Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.