Opened 4 weeks ago
Closed 4 weeks ago
#64793 closed defect (bug) (fixed)
Options: Mask connector API keys on All Options screen
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Milestone: | 7.0 | Priority: | normal |
| Severity: | normal | Version: | trunk |
| Component: | General | Keywords: | has-patch |
| Focuses: | Cc: |
Description
Description
Connector API keys are visible in plain text on the All Options screen
(wp-admin/options.php). The connectors system masks keys via
option_{$option_name} filter, but options.php queries the database
directly, bypassing get_option().
Steps to Reproduce
- Configure a connector API key via Settings > Connectors
- Navigate to
wp-admin/options.php - Search for
connectors_
Proposed Solution
Add an elseif branch that masks options matching connectors_*_api_key
using the existing _wp_connectors_mask_api_key() function.
Related
Change History (3)
This ticket was mentioned in PR #11158 on WordPress/wordpress-develop by @jorgefilipecosta.
4 weeks ago
#1
Note: See
TracTickets for help on using
tickets.
## Summary
wp-admin/options.phppage using the existing_wp_connectors_mask_api_key()functionconnectors_*_api_keypattern are displayed with bullets + last 4 charsTicket: https://core.trac.wordpress.org/ticket/64793#ticket
## Test plan
wp-admin/options.php••••••••••••PDU')## Screenshot
