Merge pull request #5501 from ddiroma/BACKLOG-39521

[BACKLOG-39521] Security credentials exposed on clear text when using…
pentaho · Jan 23, 2024 · 7c88769 · 7c88769
2 parents 7d098a3 + 347af4d
commit 7c88769
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/...src/main/java/org/pentaho/platform/plugin/services/importexport/CommandLineProcessor.java b/...src/main/java/org/pentaho/platform/plugin/services/importexport/CommandLineProcessor.java
@@ -14,7 +14,7 @@
  * See the GNU Lesser General Public License for more details.
  *
  *
- * Copyright (c) 2002-2023 Hitachi Vantara. All rights reserved.
+ * Copyright (c) 2002-2024 Hitachi Vantara. All rights reserved.
  *
  */
 
@@ -790,10 +790,7 @@ private void performBackup() throws ParseException, KettleException, URISyntaxEx
    */
   private String buildURL( String contextURL, String apiPath ) throws ParseException, KettleException {
     StringBuilder sb = new StringBuilder();
-    sb.append( contextURL ).append( apiPath )
-      .append( "?userid=" ).append( getUsername() )
-      .append( "&password=" )
-      .append( Encr.encryptPassword( Encr.decryptPasswordOptionallyEncrypted( getPassword() ) ) );
+    sb.append( contextURL ).append( apiPath );
 
     return sb.toString();
   }