cloudstack-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rafael Weingärtner <>
Subject Re: Remove 'md5Hashed' variable from Javascript
Date Thu, 12 Apr 2018 22:34:24 GMT
Hello folks,
I have not heard anything back here. I will still wait a few more days. If
I do not see anybody against it, I will assume lazy consensus and proceed
removing these variables.

On Mon, Apr 9, 2018 at 2:31 PM, Rafael Weingärtner <> wrote:

> Hello fellow CloudStackers,
> Today I was working on CLOUDSTACK-5235, which is a security issue, and I
> noticed a variable ‘md5Hashed’ in the javascript that does not seem to be
> useful at all. This variable was used to control if we hash or not the
> password of users in the user side (browser). However, we no longer hash
> the password on the user side. All of the password processing is executed
> in the server side according to the priority of hashing mechanism defined
> by the administrator.
> I am addressing this cleanup with this PR
> cloudstack/pull/2555.
> If you have any objections regarding this variable and its relate code
> removal, please do so. Otherwise, we will proceed to remove it.
> --
> Rafael Weingärtner

Rafael Weingärtner

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message