Merge pull request #45357 from nextcloud/fix/hide-ldap-password-as-sensitive

fix: add ldap_exop_passwd function to sensitive value
pull/25300/merge
Joas Schilling 2 weeks ago committed by GitHub
commit 4391c730f7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -319,7 +319,7 @@ class LDAP implements ILDAPWrapper {
private function preFunctionCall(string $functionName, array $args): void {
$this->curArgs = $args;
if(strcasecmp($functionName, 'ldap_bind') === 0) {
if(strcasecmp($functionName, 'ldap_bind') === 0 || strcasecmp($functionName, 'ldap_exop_passwd') === 0) {
// The arguments are not key value pairs
// \OCA\User_LDAP\LDAP::bind passes 3 arguments, the 3rd being the pw
// Remove it via direct array access for now, although a better solution could be found mebbe?

Loading…
Cancel
Save