Commit Graph

1 Commits (6ec3e105f98f051069c5e59401a9b15d29c1aab1)

Author SHA1 Message Date
Matt Davis 8bcd4f39f4
[stable-2.15] Preserve `_ansible_no_log` from action result; fix `include_vars` to set properly (#84143) (#84182)
* fixes for CVE-2024-8775

* propagate truthy `_ansible_no_log` in action result (previously superseded by task-calculated value)
* always mask entire `include_vars` action result if any file loaded had a false `show_content` flag (previously used only the flag value from the last file loaded)

* update no_log tests for CVE-2024-8775
* include validation of _ansible_no_log preservation when set by actions
* replace static values with dynamic for increased robustness to logging/display/callback changes (but still using grep counts :( )

* changelog

* use ternary, coerce to bool explicitly
(cherry picked from commit c9ac477e53)
1 month ago