Storage Credentials shown in cleartext #775

New issue

Open

opened 2026-02-20 15:23:35 -05:00 by deekerman · 0 comments

deekerman commented

2026-02-20 15:23:35 -05:00

Owner

Originally created by @vabene1111 on GitHub (Oct 16, 2019).

Originally assigned to: @NGPixel on GitHub.

Describe the bug
When connecting WikiJS to a Git based backend using a password the password is always shown in cleartext on the administrator site. As most Git providers dont allow per repository based access tokens this should probably not be the case. I suggest not loading the password when the form is loaded and only changing it when its submitted in the reuqest.

this might also be the case with other storage providers but i have not tested it.

i hope this has not been reported elsewhere but i could not find an issue

To Reproduce
Steps to reproduce the behavior:

Go to 'Adminstration' > 'Storage' >'Git'
View Password in cleartext

Expected behavior
This should not be visible as any administrator can see it

Host Info (please complete the following information):

OS: Docker
Wiki.js version: 2.0.0-beta.303
Database engine: postgres 10

Originally created by @vabene1111 on GitHub (Oct 16, 2019). Originally assigned to: @NGPixel on GitHub. **Describe the bug** When connecting WikiJS to a Git based backend using a password the password is always shown in cleartext on the administrator site. As most Git providers dont allow per repository based access tokens this should probably not be the case. I suggest not loading the password when the form is loaded and only changing it when its submitted in the reuqest. this might also be the case with other storage providers but i have not tested it. i hope this has not been reported elsewhere but i could not find an issue **To Reproduce** Steps to reproduce the behavior: 1. Go to 'Adminstration' > 'Storage' >'Git' 2. View Password in cleartext **Expected behavior** This should not be visible as any administrator can see it **Host Info (please complete the following information):** - OS: Docker - Wiki.js version: 2.0.0-beta.303 - Database engine: postgres 10