ref: refs/heads/master
commit 0c1f935687b8e53d4ab96bebaf34289fe64ac6f5
Author: Martin Vidner
Date: Tue Sep 15 14:35:40 2009 +0200
Do not log the password!
---
webclient/app/models/account.rb | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/webclient/app/models/account.rb b/webclient/app/models/account.rb
index 638c2d1..60f5e3f 100644
--- a/webclient/app/models/account.rb
+++ b/webclient/app/models/account.rb
@@ -50,7 +50,8 @@ class Account < ActiveRecord::Base
YaST::ServiceResource::Base.site = uri
# create a login resource
ret = YaST::ServiceResource::Login.create(:login => login, :password =>passwd, :remember_me => true)
- logger.debug ret.inspect
+ # this would log the password!
+ # logger.debug ret.inspect
if (ret and ret.attributes["login"] == "granted")
@password = passwd
acc = find_by_login(login)
--
To unsubscribe, e-mail: yast-commit+unsubscribe@opensuse.org
For additional commands, e-mail: yast-commit+help@opensuse.org
