Skip to content

Unset $PASSWORD after grabbing it #1602

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 5, 2020
Merged

Unset $PASSWORD after grabbing it #1602

merged 1 commit into from
May 5, 2020

Conversation

nhooyr
Copy link
Contributor

@nhooyr nhooyr commented May 4, 2020

Closes #1583

@nhooyr nhooyr requested a review from code-asher as a code owner May 4, 2020 06:41
@@ -90,6 +90,7 @@ const main = async (args: Args): Promise<void> => {
} else {
logger.info(" - No authentication")
}
process.env.PASSWORD = undefined
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't really matter but since this will set it to the literal string "undefined" should we do delete process.env.PASSWORD instead?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Forgot, it's so dumb...

@nhooyr
Copy link
Contributor Author

nhooyr commented May 5, 2020

In the future we ought to add a flag/config file option and remove docs on $PASSWORD to avoid issues like these.

@nhooyr nhooyr merged commit a64f80d into master May 5, 2020
@nhooyr nhooyr deleted the unset-pass branch May 5, 2020 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove $PASSWORD from ENV after reading it.
4 participants