make support string more secure #1412

Closed
opened 2026-02-05 00:51:48 +03:00 by OVERLORD · 0 comments
Owner

Originally created by @tessus on GitHub (Nov 23, 2022).

Originally assigned to: @BlackDex on GitHub.

Opening this just as a reference.

When a support string is generated the masked entries still show certain info:

  • length of a password, user, database name in the DB URL
  • length of smtp username
  • domain length and TLD length, if subdomain is used or a sub directory
  • length and format of smtp_from

This change masks the fields with *** as it is done for passwords.

/ref #2878

Originally created by @tessus on GitHub (Nov 23, 2022). Originally assigned to: @BlackDex on GitHub. Opening this just as a reference. When a support string is generated the masked entries still show certain info: - length of a password, user, database name in the DB URL - length of smtp username - domain length and TLD length, if subdomain is used or a sub directory - length and format of smtp_from This change masks the fields with `***` as it is done for passwords. /ref #2878
OVERLORD added the enhancement label 2026-02-05 00:51:48 +03:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/vaultwarden#1412