Opened 6 months ago
Closed 6 months ago
#64793 closed defect (bug) (fixed)
Options: Mask connector API keys on All Options screen
| Reported by: | jorgefilipecosta | Owned by: | jorgefilipecosta |
|---|---|---|---|
| Priority: | normal | Milestone: | 7.0 |
| Component: | General | Version: | 7.0 |
| Severity: | normal | Keywords: | has-patch |
| Cc: | Focuses: |
Description
Description
Connector API keys are visible in plain text on the All Options screen
(wp-admin/options.php). The connectors system masks keys via
option_{$option_name} filter, but options.php queries the database
directly, bypassing get_option().
Steps to Reproduce
- Configure a connector API key via Settings > Connectors
- Navigate to
wp-admin/options.php - Search for
connectors_
Proposed Solution
Add an elseif branch that masks options matching connectors_*_api_key
using the existing _wp_connectors_mask_api_key() function.
Related
PR: https://github.com/WordPress/wordpress-develop/pull/11158
Change History (3)
This ticket was mentioned in PR #11158 on WordPress/wordpress-develop by @jorgefilipecosta.
6 months ago
#1
Note:
See TracTickets
for help on using tickets.
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)
## Summary
wp-admin/options.phppage using the existing_wp_connectors_mask_api_key()functionconnectors_*_api_keypattern are displayed with bullets + last 4 charsTicket: https://core.trac.wordpress.org/ticket/64793#ticket
## Test plan
wp-admin/options.php••••••••••••PDU')## Screenshot
