diff options
| author | Evgeny Mandrikov <mandrikov@gmail.com> | 2012-01-24 09:21:30 +0400 |
|---|---|---|
| committer | Evgeny Mandrikov <mandrikov@gmail.com> | 2012-01-24 09:27:15 +0400 |
| commit | a3e3cd6494586597404360435d11f4f686648e10 (patch) | |
| tree | ddac9080a22b2777d283f41fe21d59fdab78f1f8 /plugins/sonar-core-plugin | |
| parent | 3547823a971749e0bec7fdb2a5f1ce99f37b23f5 (diff) | |
| download | sonarqube-a3e3cd6494586597404360435d11f4f686648e10.tar.gz sonarqube-a3e3cd6494586597404360435d11f4f686648e10.zip | |
SONAR-3138 Prevent possible security flaws
* Save external password only if enabled "sonar.security.savePassword".
* Bypass restriction on password length (4), when external system enabled.
* Improve error handling.
Diffstat (limited to 'plugins/sonar-core-plugin')
| -rw-r--r-- | plugins/sonar-core-plugin/src/main/java/org/sonar/plugins/core/CorePlugin.java | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/plugins/sonar-core-plugin/src/main/java/org/sonar/plugins/core/CorePlugin.java b/plugins/sonar-core-plugin/src/main/java/org/sonar/plugins/core/CorePlugin.java index 6a105b10e98..0d33ee0d00c 100644 --- a/plugins/sonar-core-plugin/src/main/java/org/sonar/plugins/core/CorePlugin.java +++ b/plugins/sonar-core-plugin/src/main/java/org/sonar/plugins/core/CorePlugin.java @@ -189,6 +189,18 @@ import java.util.List; // SERVER-SIDE TECHNICAL PROPERTIES @Property( + key = "sonar.security.realm", + name = "Security Realm", + project = false, + global = false + ), + @Property( + key = "sonar.security.savePassword", + name = "Save external password", + project = false, + global = false + ), + @Property( key = "sonar.authenticator.downcase", name = "Downcase login", description = "Downcase login during user authentication, typically for Active Directory", |