apache / trafficcontrol

Apache Traffic Control is an Open Source implementation of a Content Delivery Network
https://trafficcontrol.apache.org/
Apache License 2.0
1.09k stars 344 forks source link

Make sensitive fields require extra click to show contents in TP #6953

Open jhg03a opened 2 years ago

jhg03a commented 2 years ago

This Improvement request (usability, performance, tech debt, etc.) affects these Traffic Control components:

Current behavior:

Currently showing a delivery service or SSL data of a delivery service displays sensitive data automatically. If you're doing something like demonstrating TP, this can inadvertently disclose that information to parties not entitled to see it.

New behavior:

It would be nice to have something like a show button that displays that content on pages with other insensitive data. Specifically this would apply to private SSL Key data, out-of-band interface credentials, and free-form ATS fields on delivery services such as raw remap. While parameters could also contain sensitive information, I did not include them because they are individually scoped and do not inherently share visual space with non-sensitive data. Should any of this data be included in grids, they also should be obscured.

rawlinp commented 2 years ago

Related: https://github.com/apache/trafficcontrol/issues/3258