atlassian-python-api
atlassian-python-api copied to clipboard
remove password from storage in object
I see the only place the object variable password is used is in jira.py based on this search of the repo:
$ grep -ri "\.password"
atlassian/jira.py: "webSudoPassword": self.password,
atlassian/rest_client.py: self.password = password
examples/jira/jira_jql_fetcher_as_weekly_report.py: jira = Jira(url=args.url, username=args.user, password=args.password)
It seems like it would be safer to not store this, pushing the responsibility completely to the sessions object instead.
@nmz787 could you share the exactly what is the purpose of that?
@nmz787 could you share the exactly what is the purpose of that?
just reducing the chance of leaking the password to another module that could be performing introspection, i.e. some other open-source module that isn't fully trusted.