Branch: refs/heads/master Home: https://github.com/jenkinsci/crowd2-plugin Commit: 3369b72f7f928facfe51f3c272a2f7fc5169c081 https://github.com/jenkinsci/crowd2-plugin/commit/3369b72f7f928facfe51f3c272a2f7fc5169c081 Author: Pavel Roskin <plros...@gmail.com> Date: 2022-08-07 (Sun, 07 Aug 2022)
Changed paths: M src/main/java/de/theit/jenkins/crowd/CrowdSecurityRealm.java A src/test/java/de/theit/jenkins/crowd/CrowdSecurityRealmTest.java Log Message: ----------- [JENKINS-68708] CrowdSecurityRealm: Prevent trim() calls on null strings Replace trim() with StringUtils.trimToEmpty(), it trims strings as well and also converts null to an empty string. Don't use trim() in the compatibility constructor. Passwords should be used without trimming. Secret.fromString(null) returns a valid object. Add unit tests for CrowdSecurityRealm constructors. Signed-off-by: Pavel Roskin <plros...@gmail.com> Commit: 87ae6f32cac1ac4d2247fd9264800ccabe1b6e91 https://github.com/jenkinsci/crowd2-plugin/commit/87ae6f32cac1ac4d2247fd9264800ccabe1b6e91 Author: Bartosz Nowak <9051964+du...@users.noreply.github.com> Date: 2022-08-09 (Tue, 09 Aug 2022) Changed paths: M src/main/java/de/theit/jenkins/crowd/CrowdSecurityRealm.java A src/test/java/de/theit/jenkins/crowd/CrowdSecurityRealmTest.java Log Message: ----------- Merge pull request #98 from proski/trim-null [JENKINS-68708] CrowdSecurityRealm: Prevent trim() calls on null strings Compare: https://github.com/jenkinsci/crowd2-plugin/compare/da78b22b225a...87ae6f32cac1 -- You received this message because you are subscribed to the Google Groups "Jenkins Commits" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-commits+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-commits/jenkinsci/crowd2-plugin/push/refs/heads/master/da78b2-87ae6f%40github.com.