Something went wrong. Try again.
@recaptime-dev's working patches + fork for Phorge, a community fork of Phabricator. (Upstream dev and stable branches are at upstream/main and upstream/stable respectively.) hq.recaptime.dev/wiki/Phorge
phorge phabricator
Something went wrong. Try again.
Use "%P" to protect session key hashes in SessionEngine queries from DarkConsole master
Summary: Ref T6960. Ref T13217. Ref T13216. Depends on D19811. Use the recently-introduced "%P" conversion ("Password/Secret") to load sessions in SessionEngine. This secret isn't critical to protect (it's the //hash// of the actual secret and not useful to attackers on its own) but it shows up on every page in DarkConsole and is an obvious case where `%P` is a more appropriate conversion. Test Plan: Note "*********" in the middle of the output here, instead of a session key hash: {F6012805} Reviewers: amckinley Reviewed By: amckinley Maniphest Tasks: T13217, T13216, T6960 Differential Revision: https://secure.phabricator.com/D19812
Author epriestley Date (Nov 16, 2018, 8:36 PM UTC) Commit 49483bdb 49483bdb4823ed66e2afaa2b642c8c6f2853b41c Parent b2e91d22 b2e91d2205393cd3c7b64addc46be6a190a4700e