[
https://jira.jboss.org/jira/browse/JBSEAM-3418?page=com.atlassian.jira.pl...
]
Jacob Orshalick closed JBSEAM-3418.
-----------------------------------
Fix Version/s: 2.1.0.CR1
Resolution: Done
Applied change.
Ignore case on none for @UserPassword hash parameter
----------------------------------------------------
Key: JBSEAM-3418
URL:
https://jira.jboss.org/jira/browse/JBSEAM-3418
Project: Seam
Issue Type: Feature Request
Components: Security
Affects Versions: 2.1.0.BETA1
Reporter: Jacob Orshalick
Assignee: Jacob Orshalick
Priority: Trivial
Fix For: 2.1.0.CR1
Original Estimate: 5 minutes
Remaining Estimate: 5 minutes
The none hash value is checked as follows:
else if ("none".equals(algorithm))
{
return password;
}
The standard MessageDigest approach ignores case on algorithm names. Perhaps we could
make the following simple change for consistency:
else if ("none".equalsIgnoreCase(algorithm))
{
return password;
}
This would ensure that regardless of case none is recognized.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira