SSL Passwords are showing as text on the pinotUI and expected to updated as text in config files as well as json files
Open
kafka
security
- Dominant language
- Java
- Stars
- 6.1k
- Forks
- 1.5k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 189
Description
SSL passwords and certificates are showing in the UI with clear text . it should be encrypted or * (astrik) . which cannot be security threat .
Contributor guide
Research direction
Start by locating the pinotUI rendering path and the config and JSON serialization paths mentioned in the issue, then trace how SSL passwords and certificates reach each output. Verify the current behavior in the UI and generated files; done means these sensitive values are consistently masked or otherwise protected without exposing clear text.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100