himanshub16 / himanshub16/ProxyMan
Cypher Passwords on config files and erase them from environment variables
Open
- Dominant language
- Shell
- Stars
- 710
- Forks
- 116
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
First of all, thank you for suach a great product, very useful in our day to day.
I have a security concern, could it be possible to cypher with an **strong cypher algorithm** the passwords stored in configuration files and don't use them as environment variables ?
Is quite a big vulnerability to store passwords in clear text in configuration files and even more to be able to access them in environment variables
Cheers
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.