Skip to content

Commit b01f484

Browse files
Add more warning to file backend
Co-authored-by: Peter Law <[email protected]>
1 parent a6bb0f9 commit b01f484

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

code_submitter/auth.py

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -213,6 +213,12 @@ class FileBackend(BasicAuthBackend):
213213
Credentials are stored in the format `TLA: password`.
214214
215215
Note: Passwords are stored in plaintext.
216+
This is acceptable for some use-cases, for example where the
217+
data being uploaded is not sensitive or because someone having
218+
access to the credentials file almost certainly implies they have
219+
access to the upload storage anyway. However this may not be
220+
the case for all use-cases and you should evaluate the risks
221+
yourself before using this backend. You have been warned!
216222
"""
217223

218224
UNKNOWN_USER_MESSAGE = "Username or password is incorrect"

0 commit comments

Comments
 (0)