Skip to content

Don't populate the password field on signup validation errors

username-removed-407765 requested to merge 14552-signup-password-leak into master
  • Previously, we were pulling params[:user][:password] as the default value for the password field. This is incorrect; we should be pulling it from @user.password or the like.

[Closes #14552 (closed)]

Merge request reports