-
Bug
-
Resolution: Fixed
-
High
-
5.0.1
Hey Atlassians!
You can see the contents of masked variables (the ones with "password" in their key) when you click on "Add variable to version" in release versioning configuration screen for deployment project.
Steps to reproduce:
1. Create a global variable with key: "testpassword" and value "abc". Normally, this variable is masked and you can't see the content.
2. Create a deployment project and click on "Configure project"
3. Go to "Release versioning"
4. Click on "Add variable to version"
5. Choose "testpassword" variable.
You can see the contents (i.e. password in plaintext) of the variable in the variables browser and also in the preview of release versions.
This also affects plan variables (not only global variables).
Cheers!
Greg