Hide userPassword on change_password postmodfy hook error message

I'm using the @change_password@ postmodify hook to sync passwords with other applications and while testing my script I've noticed that when the hook execution fails the @userPassword@ is shown on the browser.

The plan is that the script will not fail for users, but just in case I've done a quick patch to hide the password from the user error message (the command execution and the debug messages still keep the password, though).

(from redmine: issue id 3227, created on 2014-07-24, closed on 2014-08-07)

• Relations:
  • relates #3383
• Changesets:
  • Revision 70495885 by Côme Chilliet on 2014-08-06T17:55:02.000Z:

Fixes #3227 Hide userPassword from command errors and log

• Revision e0912490 by Côme Chilliet on 2014-08-06T17:55:22.000Z:

Fixes #3227 Hide userPassword from command errors and log

• Custom Fields:
  • Bug in version: 1.0.7.3
• Uploads:
  • hide_password_on_change_password_postmodfy_hook_error_message.patch PATCH
  • 0001-Fixes-3227-Hide-userPassword-from-command-errors-and.patch

Hello,

applied to 1.0.8.1 and develop

Cheers

(from redmine: written on 2014-08-06)

By bmortier on 2017-09-02T15:11:21 (imported from GitLab)

It work on 1.0.8.1.

Close issue

(from redmine: written on 2014-08-07)

By Jonathan Swaelens on 2017-09-02T15:11:21 (imported from GitLab)

closed

By Jonathan Swaelens on 2017-09-02T15:11:21 (imported from GitLab)

added Added fusiondirectory-core labels

By bmortier on 2018-10-09T19:28:43 (imported from GitLab)

added Fixed and removed Added labels

By bmortier on 2018-10-09T19:28:59 (imported from GitLab)

added Security and removed Fixed labels

By bmortier on 2018-10-09T19:29:20 (imported from GitLab)

removed Bugs label

added FSA-0005 label

added FSA-0004 label and removed FSA-0005 label

marked this issue as related to #6212

By Jonathan Swaelens on 2022-05-19T09:02:26 (imported from GitLab)