incubator-cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sanjay Tripathi" <sanjay.tripa...@citrix.com>
Subject Review Request: CLOUDSTACK-819: createAccount/User API logging password in access log file
Date Mon, 07 Jan 2013 12:47:20 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/8857/
-----------------------------------------------------------

Review request for cloudstack, Pranav Saxena, Brian Federle, and Jessica Wang.


Description
-------

We are logging passwords for createAccount/User API in the access logs. Though they are md5
hashed but the same can be easily used for logging in. 
UI should make a POST call for them instead of a GET. 


This addresses bug CLOUDSTACK-819.


Diffs
-----

  ui/scripts/accounts.js de8149f 

Diff: https://reviews.apache.org/r/8857/diff/


Testing
-------

Verified on my local CloudStack setup.


Thanks,

Sanjay Tripathi


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message