Hi Guys,
I'd consider this a bug in the new Git feature in cPanel72, but i guess it depends on your perspective! I guess you could also call it a feature?
When importing keys for a repo, the passpharse field is a text field instead of a password field. This isn't overly annoying in itself, unless you're super paranoid people are looking over your shoulder. However Chrome, and most other browsers, will try to be helpful and pre-fill that passphrase in the future. It's a bit of a security concern for any shared machines.
Is there a reason it wasn't set as a password field, or has it just been overlooked? This isn't the case when importing root ssh keys, for example.
I'd consider this a bug in the new Git feature in cPanel72, but i guess it depends on your perspective! I guess you could also call it a feature?
When importing keys for a repo, the passpharse field is a text field instead of a password field. This isn't overly annoying in itself, unless you're super paranoid people are looking over your shoulder. However Chrome, and most other browsers, will try to be helpful and pre-fill that passphrase in the future. It's a bit of a security concern for any shared machines.
Is there a reason it wasn't set as a password field, or has it just been overlooked? This isn't the case when importing root ssh keys, for example.