mirror of
https://github.com/gitbucket/gitbucket.git
synced 2026-05-07 09:47:14 +02:00
Hash password when reset it (#3026)
This commit is contained in:
@@ -693,7 +693,7 @@ trait AccountControllerBase extends AccountManagementControllerBase {
|
||||
decodeResetPasswordToken(form.token)
|
||||
.flatMap { mailAddress =>
|
||||
getAccountByMailAddress(mailAddress).map { account =>
|
||||
updateAccount(account.copy(password = form.password))
|
||||
updateAccount(account.copy(password = pbkdf2_sha256(form.password)))
|
||||
html.resetcomplete()
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user