[commits] Horde branch master updated. 99066a1654a0ceda77cfd4ae8977c643707ba0e7

Michael M Slusarz slusarz at horde.org
Thu Mar 20 22:43:13 UTC 2014


The branch "master" has been updated.
The following is a summary of the commits.

from: 17277a858ea9f5d2011e31417ceba8ee75c71856

99066a1 [mms] SECURITY: Don't leak PDO DSN authentication/connection information in exception messages.

Summary: http://github.com/horde/horde/compare/17277a858ea9f5d2011e31417ceba8ee75c71856...99066a1654a0ceda77cfd4ae8977c643707ba0e7

-----------------------------------------------------------------------

commit 99066a1654a0ceda77cfd4ae8977c643707ba0e7
Author: Michael M Slusarz <slusarz at horde.org>
Date:   Thu Mar 20 16:37:39 2014 -0600

    [mms] SECURITY: Don't leak PDO DSN authentication/connection information in exception messages.
    
    Exception messages may be displayed (desired or not) to the end-user.
    
    Not sure if we want to display a lesser version of the DSN ... I will
    leave that decision up to someone else.
    
    Also, log the error or else there is a chance that it won't be logged at
    the user level.

 framework/Db/lib/Horde/Db/Adapter/Pdo/Base.php |    3 ++-
 framework/Db/package.xml                       |    2 ++
 2 files changed, 4 insertions(+), 1 deletions(-)

http://github.com/horde/horde/commit/99066a1654a0ceda77cfd4ae8977c643707ba0e7
http://git.horde.org/horde-git/-/commit/99066a1654a0ceda77cfd4ae8977c643707ba0e7




More information about the commits mailing list