Hide userPassword on change_password postmodfy hook error message
I'm using the @change_password@ postmodify hook to sync passwords with other applications and while testing my script I've noticed that when the hook execution fails the @userPassword@ is shown on the browser.
The plan is that the script will not fail for users, but just in case I've done a quick patch to hide the password from the user error message (the command execution and the debug messages still keep the password, though).
(from redmine: issue id 3227, created on 2014-07-24, closed on 2014-08-07)
- Relations:
- relates #3383
- Changesets:
- Revision 70495885 by Côme Chilliet on 2014-08-06T17:55:02.000Z:
Fixes #3227 Hide userPassword from command errors and log- Revision e0912490 by Côme Chilliet on 2014-08-06T17:55:22.000Z:
Fixes #3227 Hide userPassword from command errors and log- Custom Fields:
- Bug in version: 1.0.7.3
- Uploads: