Bug 280478 – emerge --info shares private information (passwords)

• Status: CONFIRMED
• Product: Portage Development

[Description Luke-Jr 2009-08-05 17:28:12 UTC]

PORTAGE_ELOG_JABBERFROM="[e-mail]:N7F7MpTuaMS7h6Wcu3omdEoTa"       

the password should be filtered out -.-

[Comment 1 Zac Medico 2009-10-18 09:21:27 UTC]

We have a regex that does something like this in portage.fetch():

writemsg_stdout(_(">>> Downloading '%s'\n") % \
re.sub(r'//(.+):.+@(.+)/',r'//\1:*password*@\2/', loc))

[Comment 2 Gabriel 2021-01-13 10:25:01 UTC]

This is also true for overlay URL's, if you are lazy like me and insert passwords there to avoid typing them every time you sync. e.g., sync-uri: https://user:[e-mail]/hg/personal-overlay