repos variable appears after setting and can see it even it's secured.

Question

I have a problem inputting the Repository Variable. After I enter the AWS credentials, and refresh the page, then the variable that i have just entered earlier appears again on the Add field, i can uncheck the secured option and see the value, it's quite dangerous:

Theodora Boudale · Answer

Hi @Tùng Lê and welcome to the community!

I cannot reproduce the issue you are reporting with all supported browsers for Bitbucket Cloud. Can you please let me know the following:

* What browser are you using and what is the version of this browser?

* Can you reproduce the issue if you clear cookies and cache for bitbucket.org?

* Can you reproduce the issue in an Incognito / Private window of a supported browser with all add-ons disabled?

Supported browsers are listed on this page:

https://confluence.atlassian.com/bbkb/which-web-browsers-does-bitbucket-support-1168845119.html

Please keep in mind that even when you add a new variable, if you enter a variable name and a value you can always uncheck the Secured option if you haven't selected Add yet.

Kind regards,
Theodora

Sahir Maharaj_28wu8p · Answer

Hello @Tùng Lê

This behavior could be due to a configuration or UI caching issue. If a secured variable is visible after refreshing, it’s a potential security concern.  Ensure you’re saving changes correctly after marking the variable as secured.