summaryrefslogtreecommitdiff
path: root/lib/chef/provider/remote_file
diff options
context:
space:
mode:
authordanielsdeleo <dan@opscode.com>2013-05-24 15:58:58 -0700
committerdanielsdeleo <dan@opscode.com>2013-05-24 15:58:58 -0700
commitdd134a7861e4168c553e201dab08cfcfa9b3e360 (patch)
tree593243a2ee3929b7b617af6d2834f9e81e6ee876 /lib/chef/provider/remote_file
parent18259659df47983e52fd46c9a3c1656064c1361e (diff)
downloadchef-dd134a7861e4168c553e201dab08cfcfa9b3e360.tar.gz
sanitize passwords in URLs when caching metadata
replace passwords with 'XXXX' when generating the file cache path to store cache control headers for that URI.
Diffstat (limited to 'lib/chef/provider/remote_file')
-rw-r--r--lib/chef/provider/remote_file/cache_control_data.rb2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/chef/provider/remote_file/cache_control_data.rb b/lib/chef/provider/remote_file/cache_control_data.rb
index 068cdd94ad..5c3cd3cb9e 100644
--- a/lib/chef/provider/remote_file/cache_control_data.rb
+++ b/lib/chef/provider/remote_file/cache_control_data.rb
@@ -81,6 +81,8 @@ class Chef
attr_reader :uri
def initialize(uri)
+ uri = uri.dup
+ uri.password = "XXXX" unless uri.userinfo.nil?
@uri = uri.to_s
end