Skip to content

Don't populate the password field on signup validation errors

Timothy Andrew requested to merge 14552-signup-password-leak into master
  • Previously, we were pulling params[:user][:password] as the default value for the password field. This is incorrect; we should be pulling it from @user.password or the like.

[Closes #14552 (closed)]

Edited by 🤖 GitLab Bot 🤖

Merge request reports