Browse Source

Merge pull request #45357 from nextcloud/fix/hide-ldap-password-as-sensitive

fix: add ldap_exop_passwd function to sensitive value
pull/45374/head
Joas Schilling 1 month ago
parent
commit
4391c730f7
No account linked to committer's email address
1 changed files with 1 additions and 1 deletions
  1. 1
    1
      apps/user_ldap/lib/LDAP.php

+ 1
- 1
apps/user_ldap/lib/LDAP.php View File

@@ -319,7 +319,7 @@ class LDAP implements ILDAPWrapper {

private function preFunctionCall(string $functionName, array $args): void {
$this->curArgs = $args;
if(strcasecmp($functionName, 'ldap_bind') === 0) {
if(strcasecmp($functionName, 'ldap_bind') === 0 || strcasecmp($functionName, 'ldap_exop_passwd') === 0) {
// The arguments are not key value pairs
// \OCA\User_LDAP\LDAP::bind passes 3 arguments, the 3rd being the pw
// Remove it via direct array access for now, although a better solution could be found mebbe?

Loading…
Cancel
Save