From 7c9a542006d82880011ff33de22c6db947019340 Mon Sep 17 00:00:00 2001 From: DjLegolas Date: Sat, 22 Jan 2022 21:23:40 +0200 Subject: [PATCH] [GTK] Hide account password length in log We should not let anyone know the account's password length, as it can help to crack it. Instead, we will print a constant amount (10) of asterisks. Closes: https://github.com/deluge-torrent/deluge/pull/346 --- deluge/ui/gtk3/menubar.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deluge/ui/gtk3/menubar.py b/deluge/ui/gtk3/menubar.py index a78a2472f..a812a8cac 100644 --- a/deluge/ui/gtk3/menubar.py +++ b/deluge/ui/gtk3/menubar.py @@ -567,7 +567,7 @@ class MenuBar(component.Component): account_to_log = {} for key, value in account.copy().items(): if key == 'password': - value = '*' * len(value) + value = '*' * 10 account_to_log[key] = value known_accounts_to_log.append(account_to_log) log.debug('_on_known_accounts: %s', known_accounts_to_log)