arangodb / arangodb/arangodb-java-driver
passwords should _not_ use `String` type
Open
@rashtao is already working on this.
Since Dec 13, 2022.
enhancement
- Dominant language
- Java
- Stars
- 210
- Forks
- 96
- Avg merge
- 6h 32m
- Merged PRs (30d)
- 5
Description
Storing / passing passwords as String is a common security issue because these password strings will remain in the common String pool for a long time. Instead, passwords should use char[] or byte[] as types. I see this mistake in quite a few places in the API, but it all starts at com.arangodb.ArangoDB.Builder#password
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.