make support string more secure #5055

Closed
opened 2026-03-07 20:11:14 -06:00 by GiteaMirror · 0 comments
Owner

Originally created by @tessus on GitHub (Nov 23, 2022).

Originally assigned to: @BlackDex on GitHub.

Opening this just as a reference.

When a support string is generated the masked entries still show certain info:

  • length of a password, user, database name in the DB URL
  • length of smtp username
  • domain length and TLD length, if subdomain is used or a sub directory
  • length and format of smtp_from

This change masks the fields with *** as it is done for passwords.

/ref #2878

Originally created by @tessus on GitHub (Nov 23, 2022). Originally assigned to: @BlackDex on GitHub. Opening this just as a reference. When a support string is generated the masked entries still show certain info: - length of a password, user, database name in the DB URL - length of smtp username - domain length and TLD length, if subdomain is used or a sub directory - length and format of smtp_from This change masks the fields with `***` as it is done for passwords. /ref #2878
GiteaMirror added the enhancement label 2026-03-07 20:11:14 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#5055