1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
community.general/plugins
patchback[bot] 271bafb637
passwordstore: Prevent using path as password (#4192) (#4218)
Given a password stored in _path/to/secret_, requesting the password
_path/to_ will literally return `path/to`. This can lead to using
weak passwords by accident/mess up logic in code, based on the
state of the password store.

This is worked around by applying the same logic `pass` uses:
If a password was returned, check if there is a .gpg file it could
have come from. If not, treat it as missing.

Fixes ansible-collections/community.general#4185

(cherry picked from commit da49c0968d)

Co-authored-by: grembo <freebsd@grem.de>
2022-02-17 21:33:18 +01:00
..
action fixed the utf-8 marker (#3162) 2021-08-07 15:02:21 +02:00
become Update BOTMETA, fix some plugin authors, improve BOTMETA extra sanity test (#3069) 2021-07-26 11:44:41 +02:00
cache Fix new devel sanity errors. (#3194) 2021-08-12 12:07:50 +02:00
callback opentelemetry: enrich services for jenkins, hetzner or jira (#4105) (#4190) 2022-02-12 09:17:26 +00:00
connection Get rid of distutils.spawn and distutils.util (#3934) (#3974) 2022-01-04 07:22:25 +01:00
doc_fragments Updated keycloak.py to allow defining connection timeout value (#4168) (#4178) (#4198) 2022-02-14 19:56:01 +01:00
filter Add options to filter lists_mergeby (#4058) (#4101) 2022-01-28 12:46:05 +01:00
inventory Update Proxmox Inventory Documentation with additional examples (#4148) (#4159) 2022-02-05 21:57:13 +01:00
lookup passwordstore: Prevent using path as password (#4192) (#4218) 2022-02-17 21:33:18 +01:00
module_utils Updated keycloak.py to allow defining connection timeout value (#4168) (#4178) (#4198) 2022-02-14 19:56:01 +01:00
modules ini_file: Don't report changed=true when removing if nothing is changed. (#4155) (#4214) 2022-02-17 13:50:57 +01:00
test a_module test: fix crash in case of tombstoning (#3660) (#3662) 2021-11-04 13:02:18 +01:00