carolinux / gdata-python-client

Automatically exported from code.google.com/p/gdata-python-client
0 stars 1 forks source link

Spreadsheet example requires very insecure entry of username/password #448

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Run gdata-2.0.11/samples/spreadsheets/spreadsheetExample.py --user <user> 
-pw <password> as indicated
2. Input a fake user and pw
3. Type "history" or exit terminal and notice your .bash_history w/ user/pass 
in full plaintext glory.

What is the expected output? What do you see instead?

It is bad practice to have your user/pass stored in plain text on your system.  
Running this example encourages this, and for users who don't know any better 
stores their pw in .bash_history (and possibly elsewhere depending on system).

Python has the "getpass" library for this purpose.  A combination of 
getpass.getuser() and getpass.getpass() 

What version of the product are you using?
gdata-2.0.11.final.tar.gz 

Please provide any additional information below.

I've attached an example w/ a few simple changes that help me sleep at night. ;)

Original issue reported on code.google.com by kwharri...@gmail.com on 18 Sep 2010 at 3:42

Attachments:

GoogleCodeExporter commented 9 years ago
I removed the attached file after reading the wiki page on appropriate 
procedure for submitting patches. Sorry bout that.

Original comment by kwharri...@gmail.com on 18 Sep 2010 at 4:19

GoogleCodeExporter commented 9 years ago
I'm looking forward to seeing the patch on codereview.appspot.com.  

   Thanks  
   -joe

Original comment by joe.gregorio@gmail.com on 28 Sep 2010 at 3:21