Don't leak plain text password in kcContext

This commit is contained in:
Oliver Traber 2023-10-29 13:57:22 +01:00
parent 10cfff043b
commit 0a562763e6
Signed by: Bluemedia
GPG key ID: C0674B105057136C

View file

@ -95,6 +95,9 @@ SOFTWARE.
) || ( ) || (
["masterAdminClient", "delegateForUpdate", "defaultRole"]?seq_contains(key) && ["masterAdminClient", "delegateForUpdate", "defaultRole"]?seq_contains(key) &&
are_same_path(path, ["realm"]) are_same_path(path, ["realm"])
) || (
["password"]?seq_contains(key) &&
are_same_path(path, ["login"])
) )
> >
<#continue> <#continue>