Merge branch '14552-signup-password-leak' into 'master'
Don't populate the password field on signup validation errors - Previously, we were pulling `params[:user][:password]` as the default value for the password field. This is incorrect; we should be pulling it from `@user.password` or the like. [Closes #14552] See merge request !3691
Showing with 60 additions and 5 deletions