##// END OF EJS Templates
u » pc » rhodecode-enterprise-ce-fork-pc
RSS

Fork of rhodecode-enterprise-ce

auth: don't break hashing in case of user with empty password....
auth: don't break hashing in case of user with empty password. In some cases such as LDAP user created via external scripts users might set the passwords to empty. The hashing uses the md5(password_hash) to store reference to detect password changes and forbid using the same password. In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such case. This change makes it work for empty passwords now.
marcink - - Load All Authors

File last commit:

r1:854a839a default
r2203:8a18c3c3 default
Show More
release-notes-3.0.1.rst
22 lines | 505 B | text/x-rst | RstLexer
/ docs / release-notes / release-notes-3.0.1.rst
History | Annotation | Raw |Copy content |Copy permalink

|RCE| 3.0.1 |RNS|

General

  • 2015-02-03

News

  • Server info: added more details into server info page.

Fixes

  • Security: fixed severe issue with leaking of auth_tokens(api_keys) on certain API calls.
  • VCS Client: Improved reconnection logic.
  • SVN: forbid certain actions like pull requests on svn repositories.
  • Style: fixed comments with Markdown, and also multiple styling issues.
  • Style: fixed re-captcha html issues.
  • Style: fixed large inputs.