[http] Git error messages reveal password encoded in the URL
- From
- Ketan Padegaonkar <ketanpadegaonkar@gmail.com>
- Date
- Jul 19, 2010, 17:00 UTC
- Message-ID
- <4C4484A4.5010009@gmail.com>
Hi,
We use http to serve our git repos, in order for git to not ask me a username/password everytime, I've put the following in my .git/config:
[remote "origin"] url = https://user:pass@host/repo.git
What is discerning is that every time git encounters a problem connecting to the repo, I get the following error containing both my username and password.
error: Couldn't resolve host 'host' while accessing https://user:pass@host/repo.git/info/refs
I would like to suggest that the password be removed/masked from this error message.
-- Ketan http://ketan.padegaonkar.name | http://eclipse.org/swtbot