[wp-trac] [WordPress Trac] #64793: Options: Mask connector API keys on All Options screen
WordPress Trac
noreply at wordpress.org
Wed Mar 4 14:55:12 UTC 2026
#64793: Options: Mask connector API keys on All Options screen
------------------------------+-----------------------
Reporter: jorgefilipecosta | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: 7.0
Component: General | Version: trunk
Severity: normal | Keywords: has-patch
Focuses: |
------------------------------+-----------------------
== Description ==
Connector API keys are visible in plain text on the All Options screen
(`wp-admin/options.php`). The connectors system masks keys via
`option_{$option_name}` filter, but options.php queries the database
directly, bypassing `get_option()`.
== Steps to Reproduce ==
1. Configure a connector API key via Settings > Connectors
2. Navigate to `wp-admin/options.php`
3. Search for `connectors_`
== Proposed Solution ==
Add an `elseif` branch that masks options matching `connectors_*_api_key`
using the existing `_wp_connectors_mask_api_key()` function.
== Related ==
PR: https://github.com/WordPress/wordpress-develop/pull/11158
--
Ticket URL: <https://core.trac.wordpress.org/ticket/64793>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list