Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Redact passwords from index-url during download #7373

Merged
merged 1 commit into from
Nov 17, 2019
Merged

Redact passwords from index-url during download #7373

merged 1 commit into from
Nov 17, 2019

Conversation

Cactusmachete
Copy link
Contributor

@Cactusmachete Cactusmachete commented Nov 17, 2019

Made changes in _download_url so that it relies on redact_auth_from_url from misc to redact passwords.

Closes #6783

Supersedes #6834.

Copy link
Member

@chrahunt chrahunt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks so much for picking this up!

I have just one cosmetic comment, otherwise this looks good to me.

src/pip/_internal/operations/prepare.py Outdated Show resolved Hide resolved
Made changes in _download_url so that it relies on
redact_auth_from_url from misc to redact passwords.

Closes #6783
@chrahunt chrahunt merged commit 2f85d5a into pypa:master Nov 17, 2019
@chrahunt
Copy link
Member

The read the docs build has been failing periodically, we're working with them on it so I'll merge this.

@chrahunt
Copy link
Member

Thanks so much for your contribution!

If you're interested in doing more feel free to check out the other open issues. We've pre-vetted the ones marked "good first issue" and (usually) the ones marked "awaiting PR" as being available to work on. If the next steps for any of those seems unclear please don't hesitate to leave a comment saying so.

@Cactusmachete
Copy link
Contributor Author

Sure thing.
I joined the dev irc as well, so I'll ask around there if I have any more questions, if it's active?

@chrahunt
Copy link
Member

It could be more active, but it's as good a place as any for real-time communication. For reliability I think the issue tracker is best.

@lock lock bot added the auto-locked Outdated issues that have been locked by automation label Dec 17, 2019
@lock lock bot locked as resolved and limited conversation to collaborators Dec 17, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
auto-locked Outdated issues that have been locked by automation
Projects
None yet
Development

Successfully merging this pull request may close these issues.

pip shows password in index-url in the "Downloading <url>" message
2 participants