On Mon, Oct 10, 2016 at 4:43 PM, Carsten Ziegeler <cziege...@apache.org> wrote:
> ...we should filter these values in ResourceResolverControl
> for getting the attributes, otherwise the using bundle can be fetch from
> the attributes. Currently that code just filters the password...

I have added tests in http://svn.apache.org/r1764845 ,
AUTH_SERVICE_BUNDLE is correctly hidden.


Reply via email to