Topic "Proxy Password logged when using RawSettings and .NET dll"

Author Message
Guest




When using the .NET library in C# and setting proxy settings as rawsettings, I see the unencrypted proxy password logged in the server log file.

I am using WinSCP 5.5.4 on Windows XP. I have replaced the details with asterisks. Example log message:
> 2014-10-16 20:45:52.370 Script: open -passive=1 -timeout=60 ftp://*****:***@**.**.***.**:** -rawsettings ProxyMethod="2" ProxyHost="***" ProxyPort="***" ProxyUsername="***" ProxyPassword="***"

Is there a way to turn off this part of the logging? This is a huge risk.

Thanks,
Jack
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24553
Location: Prague, Czechia
No, you cannot turn this off.
_________________
Martin Prikryl
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License