[wp-trac] [WordPress Trac] #57304: Add SensitiveParameter attribute to DB connection and login variables

WordPress Trac noreply at wordpress.org
Tue Feb 28 21:17:40 UTC 2023


#57304: Add SensitiveParameter attribute to DB connection and login variables
-----------------------------+-----------------------------
 Reporter:  TobiasBg         |       Owner:  (none)
     Type:  enhancement      |      Status:  new
 Priority:  normal           |   Milestone:  Future Release
Component:  Security         |     Version:
 Severity:  normal           |  Resolution:
 Keywords:  php82 has-patch  |     Focuses:
-----------------------------+-----------------------------

Comment (by petitphp):

 I've created a PR to implement this change.

 It adds the `SensitiveParameter` attribute to "password" parameters in
 various place in the codebase.

 The `PasswordHash` class **has not been touch** as I wasn't sure if this
 is still considered an "external library" or if it's part of the core.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57304#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list