Hide password variables from logs

FinalBuilder Feature Requests
1

With FinalBuilder 8.5 adding support for password variables, we were pleased to see that these values are now encrypted inside FinalBuilder project files. This is a very welcome improvement from a security standpoint.

However, it appears that password variable values may still be written in plain text to FinalBuilder log files during execution.

Would it be possible to have password variables automatically masked in logs, for example by displaying them as *** or [hidden], wherever they are expanded or printed?

Thanks for considering this enhancement.

2

Hi Ulrik

Which action(s) were you seeing the password variable in?

We do attempt to mask variables from the logs - but it’s not perfect because some tools echo command lines etc.

3

Action was Execute Batch Script, password variable passed in Parameters.

4

Ok looking into it.

1 Like
5

Hopefully we have found all the cases - this build has fixes for 2 actions that were not masking correctly (not using the correct api).

https://downloads.finalbuilder.com/downloads/finalbuilder/860/FB860_3670.exe