Commit c5f311f
committed
Don't specify the password on the command line
https://www.netmeister.org/blog/passing-passwords.html has a decent
overview of the security issues with that.
Since this is interactive, getting curl to prompt for the password is
probably the easiest alternative. From
https://curl.se/docs/manpage.html#-u
> If you simply specify the username, curl prompts for a password.
I don't have an easy way to test the actual command in this doc, but the
flag does seem to behave as documented at least:
```
$ curl --user [email protected] https://google.com
Enter host password for user '[email protected]'
```
Fixes gitgitgadget/gitgitgadget#18431 parent 55522b9 commit c5f311f
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
18 | | - | |
| 18 | + | |
19 | 19 | | |
0 commit comments