Skip to content

Conversation

@TravisEz13
Copy link
Member

@TravisEz13 TravisEz13 commented Feb 12, 2021

PR Summary

Don't write possible secrets to verbose stream for web cmdlets

PR Context

Addresses, partially, #14417

PR Checklist

@TravisEz13 TravisEz13 added the WG-Security security related areas such as JEA label Feb 12, 2021
@ghost ghost assigned daxian-dbw Feb 12, 2021
@iSazonov
Copy link
Collaborator

What about backport?

@Steg17
Copy link

Steg17 commented Feb 13, 2021

Nice what happen to the color ruby!

@TravisEz13
Copy link
Member Author

@iSazonov This is considered a low severity security issue. We normally only fix these in the current version. If there is a need for a backport, I suggest discussing in #14417

@TravisEz13 TravisEz13 added the CL-General Indicates that a PR should be marked as a general cmdlet change in the Change Log label Feb 15, 2021
@TravisEz13 TravisEz13 merged commit 0fffdf5 into PowerShell:master Feb 15, 2021
@TravisEz13 TravisEz13 deleted the InvokeWebRequest branch February 15, 2021 19:15
@ghost
Copy link

ghost commented Mar 16, 2021

🎉v7.2.0-preview.4 has been released which incorporates this pull request.:tada:

Handy links:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CL-General Indicates that a PR should be marked as a general cmdlet change in the Change Log WG-Security security related areas such as JEA

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants