Issue #13 invalid

doesn't hide all passwords

Adrian Dries
created an issue

{{{

!python

if 'password' in k or 'passwd' in k or 'pwd' in k }}}

These are the only names passwords are known as? What's the point of this?

Comments (1)

  1. Sergey Schetinin

    https://bitbucket.org/ianb/webob/changeset/185effcb764a

    """I've added a few line in multidict.py so that password values are not showed in repr()

    This can be usefull if you use weberror to notify a mailing list. If you have a failure in your subscirption process, everybody on the list know the password of the subscriber... :)"""

    Also, inquiries like this probably belong to the mailing list, not bug tracker. Please use it if you want to continue this discussion.

  2. Log in to comment