Comments (2)
This is a major issue. For example, warning is triggered for nested json objects, which are perfectly valid but due to to_s conversion include spaces as field separators. Another big issue is with valid json strings which contain LF, CR etc escape sequences. According to JSON spec, escape sequences are perfectly valid.
perfectly valid json but vault's validator does not validate as to_s
{
"dummy": {
"test1": 1,
"test2": 2
}
}
to_s converts the value of the key "dummy" to a string like this {:test1=>1, :test2=>2}
Issue with escape sequences
{
"dummy": "aaaa\naaaa\n"
}
Again perfectly valid json with string value, which includes \n
escape sequence. Strict RFC 4627 spec based validator validates this example but once again method validate_json
triggers warning.
from chef-vault.
@mariastroe @vkarve-chef The biggest issue here is that the warning leaks/displays the value. Can this get fixed ASAP please?
from chef-vault.
Related Issues (20)
- Different vault variable output HOT 1
- Handling race conditions when bootstrapping multiple nodes HOT 1
- rotate keys with --clean-unknown-clients also cleans known clients HOT 2
- Feature Request: Allow knife vault commands to be executed on .json files
- knife vault : Problem escaping string in JSON HOT 3
- cucumber tests are failing on windows
- Syntax errors in vault_admins.rb HOT 1
- Does the latest version of the gem support autoscaling ?
- Impossible to store SSL/SSH private Key in vault HOT 9
- chef-vault command not returning any results HOT 3
- Can't create chef vault items in solo mode HOT 1
- Gemspec gives incorrect Ruby version being supported with "rescue in blocks" syntax being used HOT 2
- "Item itemname_keys not found in data bag databagname", while I try to create a new vault with newer versions of Chef Workstation HOT 8
- knife vault doesn't support ssh_agent_signing HOT 3
- ERROR: ChefVault::Exceptions::SecretDecryption: is encrypted for you, but your private key failed to decrypt the contents. (if you regenerated your client key, have an administrator of the vault run 'knife vault refresh') HOT 3
- RSA paddings
- add support for client_key_contents HOT 1
- Do chef vault have any c# library to read the secret data
- No longer able to refresh when search_query is empty
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from chef-vault.