make support string more secure #1927

New Issue

MrUnknownDE · 2026-04-06T02:39:42+02:00

MrUnknownDE commented

2026-04-06 02:39:42 +02:00

Originally created by @tessus on 10/31/2022

When a support string is generated the masked entries still show certain info:

length of a password, user, database name in the DB URL
length of smtp username
domain length and TLD length, if subdomain is used or a sub directory
length and format of smtp_from

This change masks the fields with *** as it is done for passwords.

*Originally created by @tessus on 10/31/2022* When a support string is generated the masked entries still show certain info: - length of a password, user, database name in the DB URL - length of smtp username - domain length and TLD length, if subdomain is used or a sub directory - length and format of smtp_from This change masks the fields with `***` as it is done for passwords.

MrUnknownDE closed this issue

2026-04-06 02:39:42 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1927