[MNG-4082] Encryption is triggered if passwords merely contain curly braces

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.2.0
• Component/s: Settings
• Assignee: John Dennis Casey
• Reporter: Mark Hobson
• Created: 11/Mar/09 06:49
• Updated: 08/Feb/20 15:41
• Resolved: 29/Apr/09 15:31

Description

From what I gather, the syntax for encrypted passwords is "

{...}

", but encryption is also triggered for passwords containing curly braces.

Issue Links

• is related to: MNG-553 Secure Storage of Server Passwords
• relates to: MNG-4612 Password escaping doesn't work

Sub-Tasks

• document escape character for curly braces in clear-text passwords for settings.xml password security: Closed
• switch to released versions of plexus-sec-dispatcher (and by ext. plexus-cipher) once they're available: Closed