Don't leak plain text password in kcContext

2023-10-29 13:57:22 +01:00 · 2023-10-29 13:57:22 +01:00 · 0a562763e6
parent 10cfff043b
commit 0a562763e6
1 changed files with 4 additions and 1 deletions
--- a/src/static/login/baselayout.ftl
+++ b/src/static/login/baselayout.ftl
@ -92,9 +92,12 @@ SOFTWARE.
          key == "identityProviderBrokerCtx" && 
          are_same_path(path, []) &&
          ["login-idp-link-confirm.ftl", "login-idp-link-email.ftl" ]?seq_contains(pageId)
-        ) ||  (
+        ) || (
          ["masterAdminClient", "delegateForUpdate", "defaultRole"]?seq_contains(key) &&
          are_same_path(path, ["realm"])
+        ) || (
+          ["password"]?seq_contains(key) &&
+          are_same_path(path, ["login"])
        )
      >
        <#continue>