Some of the sites I'm monitoring are behind basic HTTP authentication, and, as such, I've added usernames and passwords to the URLs (for example, "https://user:password@site.example.com/foo").

I've attached a patch that replaces the passwords in URLs with "..." when displayed various places in the admin interface. (I understand this doesn't add any serious security, since prod_monitor users can still get to the passwords by editing sites, but at least the passwords aren't blasted everywhere.)

CommentFileSizeAuthor
prod_monitor-sanitize.diff3.19 KBsmokris

Comments

malc0mn’s picture

Assigned: Unassigned » malc0mn
Status: Active » Closed (fixed)

Applied to the 6.x-1.x-dev branch, see CVS comments.

smokris’s picture

Great. Thanks, malc0mn.