Skip to content

Unset $PASSWORD after grabbing it#1602

Merged
nhooyr merged 1 commit into
masterfrom
unset-pass
May 5, 2020
Merged

Unset $PASSWORD after grabbing it#1602
nhooyr merged 1 commit into
masterfrom
unset-pass

Conversation

@nhooyr

@nhooyr nhooyr commented May 4, 2020

Copy link
Copy Markdown
Contributor

Closes #1583

@nhooyr nhooyr requested a review from code-asher as a code owner May 4, 2020 06:41
Comment thread src/node/entry.ts Outdated
} else {
logger.info(" - No authentication")
}
process.env.PASSWORD = undefined

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't really matter but since this will set it to the literal string "undefined" should we do delete process.env.PASSWORD instead?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Forgot, it's so dumb...

@nhooyr

nhooyr commented May 5, 2020

Copy link
Copy Markdown
Contributor Author

In the future we ought to add a flag/config file option and remove docs on $PASSWORD to avoid issues like these.

@nhooyr nhooyr merged commit a64f80d into master May 5, 2020
@nhooyr nhooyr deleted the unset-pass branch May 5, 2020 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove $PASSWORD from ENV after reading it.

4 participants