1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
community.general/changelogs
patchback[bot] 56c5a8b9b2
passwordstore: Prevent using path as password (#4192) (#4217)
Given a password stored in _path/to/secret_, requesting the password
_path/to_ will literally return `path/to`. This can lead to using
weak passwords by accident/mess up logic in code, based on the
state of the password store.

This is worked around by applying the same logic `pass` uses:
If a password was returned, check if there is a .gpg file it could
have come from. If not, treat it as missing.

Fixes ansible-collections/community.general#4185

(cherry picked from commit da49c0968d)

Co-authored-by: grembo <freebsd@grem.de>
2022-02-17 21:33:09 +01:00
..
fragments passwordstore: Prevent using path as password (#4192) (#4217) 2022-02-17 21:33:09 +01:00
.gitignore Add extra sanity tests and changelog config. (#352) 2020-05-18 19:36:35 +02:00
changelog.yaml Release 3.8.4. 2022-01-11 06:41:56 +01:00
config.yaml Enable flatmapping for changelog generator. (#551) 2020-06-21 17:00:49 +02:00