diff options
| author | Rémy Coutable <remy@rymai.me> | 2016-04-18 08:27:19 +0000 |
|---|---|---|
| committer | Rémy Coutable <remy@rymai.me> | 2016-04-18 08:27:19 +0000 |
| commit | 6d899f46b577190eade2db9be548dcda271a9023 (patch) | |
| tree | ad07956132e4aa0f995bf31464e2ece23f8984cf /PROCESS.md | |
| parent | e9f20f5922e9c365b4af14e53881a7bafba4139c (diff) | |
| parent | 38557ec400d8c28ea73df4bc5142e156c7ab8855 (diff) | |
| download | gitlab-ce-6d899f46b577190eade2db9be548dcda271a9023.tar.gz | |
Merge branch '14552-signup-password-leak' into 'master'
Don't populate the password field on signup validation errors
- Previously, we were pulling `params[:user][:password]` as the default
value for the password field. This is incorrect; we should be pulling
it from `@user.password` or the like.
[Closes #14552]
See merge request !3691
Diffstat (limited to 'PROCESS.md')
0 files changed, 0 insertions, 0 deletions