Fixed: Vault warns when valid JSON contains special character sequences
Description
Fixes an issue where Chef Vault writes a warning when a valid JSON document contains special character sequences, exposing sensitive vault data in the warning message.
Chef Vault should be agnostic to the content of the vault item JSON. It no longer inspects vault item contents, validation responsibility is left to the JSON parser to ensure the JSON data is valid.
Related Issue
Types of changes
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to change)
- [ ] Chore (non-breaking change that does not add functionality or fix an issue)
Checklist:
- [x] I have read the CONTRIBUTING document.
- [x] I have run the pre-merge tests locally and they pass.
- [ ] I have updated the documentation accordingly.
- [x] I have added tests to cover my changes.
- [ ] If
Gemfile.lockhas changed, I have used--conservativeto do it and included the full output in the Description above. - [x] All new and existing tests passed.
- [x] All commits have been signed-off for the Developer Certificate of Origin.
Additional context around this issue can be found in:
Hey @johnmccrae - I think this is related to powershell stuff?
Just to keep people following this PR up-to-date, I followed up in Slack on this. The team is aware - but the pipelines here need some significant investigation to sort out. I've asked for a timeline estimate.
https://github.com/chef/chef-vault/pull/435/files @jaymzh @decoyjoe fyi, I believe this is the work to fix the pipeline.
Branch has been rebased on latest from main.
@tpowell-progress @jaymzh it looks like the pipeline has been fixed. Could we get another review on this?
Yeah, just approved workflows, if they pass, we'll merge it today.
OH, we'll need workstation approvers. Will have THomas ping them in the meeting today.
@decoyjoe It looks like the branch is out of date with the main. Could you please do a rebase with the main?
@ashiqueps Rebased on main.
Quality Gate passed
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
@ashiqueps Rebased on main.
@decoyjoe , still I see this branch is out-of-date with the base branch
@nikhil2611 Oops, sorry. It's actually rebased now.