#3992 - Stack traces must omit POSTed password
| Identifier | #3992 |
|---|---|
| Issue type | Major issue (breaks an entire feature) |
| Title | Stack traces must omit POSTed password |
| Status | Completed |
| Handling member | Chris Graham |
| Version | 10.0.28 |
| Addon | core |
| Description | If a stack trace happens on a join or login screen, it will include the password that was POSTed. This is a bad idea for obvious reasons. |
| Steps to reproduce | |
| Funded? | No |
| Hotfixes | hotfix-3992, 2019-12-08 11pm.tar Only apply these hotfixes if you absolutely need them and cannot wait until the next release of Composr (releases are more reliable and strictly tested). We provide no guarantee that hotfixes will work; they may even break your site especially if a hotfix depends on another hotfix. Always make a site backup if you attempt to apply a hotfix. As of Composr version 11, the recommended way to apply a hotfix is by following the same steps as an upgrade:
For Composr version 10, manually extract the files (e.g., using 7-Zip) and overwrite files in your Composr installation that are older than the ones in the hotfix (check the file modification date/time). Skip hotfix files that do not exist in your installation. |
| Commits |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".


Comments
There have been no comments yet