apache / apache/pinot

SSL Passwords are showing as text on the pinotUI and expected to updated as text in config files as well as json files

Open
#18,961 1 comment 0 reactions 0 assignees View on GitHub
kafka security
Dominant language
Java
Stars
6.1k
Forks
1.5k
Avg merge
1d 21h
Merged PRs (30d)
189

Description

SSL passwords and certificates are showing in the UI with clear text . it should be encrypted or * (astrik) . which cannot be security threat .

Image

Contributor guide

Open the contributing guide

Research direction

Start by locating the pinotUI rendering path and the config and JSON serialization paths mentioned in the issue, then trace how SSL passwords and certificates reach each output. Verify the current behavior in the UI and generated files; done means these sensitive values are consistently masked or otherwise protected without exposing clear text.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
frontend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.