TheHive-Project / TheHive-Project/Cortex
[Feature Request] Hide password/api and any sensitive information in Cortex UI
Open
Nobody has claimed this yet.
feature request
- Dominant language
- Scala
- Stars
- 1.6k
- Forks
- 264
- PR merge metrics
- No merged PRs in 30d
Description
Request Type
Feature Request
Problem Description
All API, secret key and password found in configuration of Neurons come in clear text in the UI and in input details of reports of Analyzers and Responders.
Possible Solutions
Hide this information when send to to UI, and maybe have a 'reveal' button to request the data.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing how configuration values and Analyzer/Responder report input details are sent to and rendered in the Cortex UI. Done means API keys, secret keys, and passwords are not exposed in those views, with any reveal behavior explicitly defined across the affected paths.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- scala
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100