Skip to content

Password key hide real data type #380

@janbarasek

Description

@janbarasek

Version: 2.6.4

Bug Description

In case of password property or key array Tracy hide value automatically and render string *****.

I suggest in case of no scalar type render name of type with hidden value, because now I can not say if password key is string or object.

Snímek obrazovky 2019-08-27 v 14 31 51

Steps To Reproduce

Very simply:

public function process(): void
{
	$this->setUser([
		'user' => 'Jan',
		'password' => new ArrayHash(),
	]);
}

private function setUser(array $haystack): void
{
	$e(); // Throw error
}

On follow Tracy arguments:

Snímek obrazovky 2019-08-27 v 14 38 38

By the way, hiding items is not effective because the password is still visible in the title!

Snímek obrazovky 2019-08-27 v 14 40 39

Snímek obrazovky 2019-08-27 v 14 41 10

I will report it in next issue as security bug.

Thanks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions