mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-21 15:57:54 +00:00
b57e7075e2
The Docker-compat secret inspect endpoint was incorrectly honoring the showsecret query parameter, which could expose plaintext secret data to clients using the Docker-compatible API. This restricts showsecret to libpod-only requests. Docker-compat clients always receive redacted secret data, matching Docker's own behavior. Add APIv2 tests covering the showsecret behavior on both the Docker-compat and libpod endpoints, confirming secret data is never returned from the compat endpoint while libpod continues to honor the flag. Fixes: #29570 Signed-off-by: Davoud Azari <davidmotral@gmail.com> |
||
|---|---|---|
| .. | ||
| grpcpb | ||
| handlers | ||
| server | ||
| types | ||
| Makefile | ||
| tags.yaml | ||