[JENKINS-36007] Way to mask arbitrary Secret (was: Password is clear on log with input parameter)

On jenkins pipeline i use input with Password param but password is shown on console log

exemple:

def userInput = input(

id: 'userInput', message: 'Let\'s promote?', submitter: 'DL_KATANACLOUD_TEAM', parameters: [

[$class: 'PasswordParameterDefinition', description: 'Password', name: 'pwd']

])

sh ("echo ${userInput['pwd']}")

---
Originally reported by sebglon, imported from: Way to mask arbitrary Secret (was: Password is clear on log with input parameter)

• assignee: jglick
  
• status: Open
  
• priority: Critical
  
• component(s): credentials-binding-plugin, mask-passwords-plugin
  
• label(s): pipeline, security
  
• resolution: Unresolved
  
• votes: 7
  
• watchers: 11
  
• imported: 20251211-141027
  

On jenkins pipeline i use input with Password param but password is shown on console log


exemple:

def userInput = input(

	id: 'userInput', message: 'Let\'s promote?', submitter: 'DL_KATANACLOUD_TEAM', parameters: [

	[$class: 'PasswordParameterDefinition', description: 'Password', name: 'pwd']

]) 

sh ("echo ${userInput['pwd']}")