Skip to content

Password key hide real data type #380

@janbarasek

Description

@janbarasek

Version: 2.6.4

Bug Description

In case of password property or key array Tracy hide value automatically and render string *****.

I suggest in case of no scalar type render name of type with hidden value, because now I can not say if password key is string or object.

Snímek obrazovky 2019-08-27 v 14 31 51

Steps To Reproduce

Very simply:

public function process(): void
{
	$this->setUser([
		'user' => 'Jan',
		'password' => new ArrayHash(),
	]);
}

private function setUser(array $haystack): void
{
	$e(); // Throw error
}

On follow Tracy arguments:

Snímek obrazovky 2019-08-27 v 14 38 38

By the way, hiding items is not effective because the password is still visible in the title!

Snímek obrazovky 2019-08-27 v 14 40 39

Snímek obrazovky 2019-08-27 v 14 41 10

I will report it in next issue as security bug.

Thanks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions