password in log

Advertisement

tattdogg
Joined:
Posts:
9
Location:
Minsk, Belarus

password in log

Is there any way not to show password in logs?
winscp> open "sftp://logn:password@127.0.0.1:22" -hostkey="ssh-rsa 2048 ..." -timeout=15

Reply with quote

Advertisement

tattdogg
Joined:
Posts:
9
Location:
Minsk, Belarus

Re: password in log

martin wrote:

What log is that?
session.OutputDataReceived += SessionOnOutputDataReceived;
...
private void SessionOnOutputDataReceived(object sender, OutputDataReceivedEventArgs args)
{
     Logger.Trace(args.Data);
}

Reply with quote

martin
Site Admin
martin avatar
Joined:
Posts:
28,811
Location:
Prague, Czechia

Re: password in log

So, it's your log file. Filter the password before writing the entry to the log.

Reply with quote

tattdogg
Joined:
Posts:
9
Location:
Minsk, Belarus

Re: password in log

martin wrote:

So, it's your log file. Filter the password before writing the entry to the log.
This is what I do right now. I just wondering if I could use some property to exclude the password from your output stream.
The password can be stolen from the memory stream that way... Is it possible to add this functionality in next versions of package?

Reply with quote

Advertisement

martin
Site Admin
martin avatar
Joined:
Posts:
28,811
Location:
Prague, Czechia

Re: password in log

This request has been added to the tracker:
https://winscp.net/tracker/1475

I'm sending you an email with a development version of WinSCP to the address you have used to register on this forum.

Reply with quote

Advertisement

You can post new topics in this forum