shithub: drawterm

Info  •  Files  •  Log

cpu: remove /env/PASS to avoid leaking password to the remote system

--- a/cpu.c

+++ b/cpu.c

@@ -263,7 +263,8 @@

 	char *s;

 	user = getenv("USER");

-	pass = getenv("PASS");

+	if((pass = getenv("PASS")) != nil)

+		remove("/env/PASS");

 	host = getenv("cpu");

 	authserver = getenv("auth");