Skip to content

GitHubTemplateCreator potentially leaks information to GitHub #53140

@jamesderlin

Description

@jamesderlin

The flutter tool has a GitHubTemplateCreator class that it uses to create a git.io shortened URL that searches GitHub for an error message.

The error message could potentially contain sensitive information (e.g. a FileSystemException will contain the path to the offending file). Constructing a git.io shortened URL will save the original URL (with the embedded error message) to GitHub, and there does not seem to be any way to remove it.

Metadata

Metadata

Assignees

No one assigned

    Labels

    a: triage improvementsMake GitHub issues easier to triage and more actionabletoolAffects the "flutter" command-line tool. See also t: labels.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions