engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rclone: 3 new defects (rclone-0003 CWE-407, rclone-0004/0005 CWE-312), rclone-0001/0002 PASS

Browse source
This commit is contained in:
russell@unturf.com 2026-03-31 13:19:29 -04:00
parent 294ab0a792
commit 3a755ecf01
8 changed files with 499 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
defects/rclone-0004/patch/jottacloud_secret_log.patch Normal file
View file

@ -0,0 +1,10 @@
--- a/backend/jottacloud/jottacloud.go
+++ b/backend/jottacloud/jottacloud.go
@@ -282,7 +282,7 @@ func (f *Fs) Config(ctx context.Context, name string, m configmap.Mapper, config
return nil, fmt.Errorf("failed to register device: %w", err)
}
m.Set(configClientID, deviceRegistration.ClientID)
m.Set(configClientSecret, obscure.MustObscure(deviceRegistration.ClientSecret))
- fs.Debugf(nil, "Got clientID %q and clientSecret %q", deviceRegistration.ClientID, deviceRegistration.ClientSecret)
+ fs.Debugf(nil, "Got clientID %q (clientSecret suppressed)", deviceRegistration.ClientID)
}