Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Configuration: allow password-yielding commands in config file.

Open
#704 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
30/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Quiet
Tech stack
python
Domain
security

Research direction

Start by reading the suggested change in linked pull request #46 and how the CalDAV library handles configuration. Work out the security requirements, including owner-only write permission and using a list whose first item is an executable, before implementation. Done means the configuration can provide a password-yielding command with those safeguards.

Written by the indexing model from the issue text.

Description

In https://github.com/pycalendar/plann/pull/46 it's suggested to allow for a caldav_pass_command in the configuration file, i.e. allowing a password to be looked up from a a password safe. The logic is sound, but belongs to the CalDAV libary.

It's important to consider and mitigate any potential security impacts. At the very least, it's needed to check that only owner has write permission. Command should probably be a list instead of a shell command, with the first item in the list being an executable file.

Dominant language
Python
Stars
412
Forks
113
Avg merge
1d 7h
Merged PRs (30d)
34

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from python-caldav/caldav

All issues in python-caldav/caldav

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.