engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

login: don't show password hash inside the logs. It's irrelevant to show this.

Browse source
This commit is contained in:
Marcin Kuzminski 2017-01-11 13:41:00 +01:00
parent 9effdf9ee6
commit 86553f719e
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
rhodecode/login/views.py
View file

@ -69,8 +69,10 @@ def _store_user_in_session(session, username, remember=False):
session.save()
safe_cs = cs.copy()
safe_cs['password'] = '****'
log.info('user %s is now authenticated and stored in '
'session, session attrs %s', username, cs)
'session, session attrs %s', username, safe_cs)
# dumps session attrs back to cookie
session._update_cookie_out()