YunoHost-Apps/borg_ynh

[security] BORG_PASSPHRASE is not removed when sharing logs

fflorent opened this issue · 1 comments

fflorent commented

When a backup fails and we share logs with yunopaste, the BORG_PASSPHRASE is output in clear.

It would be worth to remove it (replace with some dummy password).

Also could be worth to also anonymize the distant repo:

image

Thanks!

zamentur commented

It has been fixed in unstable ynh version, will be available in next YNH version
YunoHost/yunohost@dbe5e51

  • 🎉1