diff options
| author |   Manoop Talasila <talasila@research.att.com> | 2019-05-30 14:43:06 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2019-05-30 14:43:06 +0000 |
| commit | 268e05aff33375197d3a1de8f3d8917608e92781 (patch) | |
| tree | af9b59f2744d65173ce701eee94c1c16dd3e67ee | |
| parent | 44402d528557991b6a96f1ee4da5573834157d26 (diff) | |
Update git submodules
* Update docs/submodules/portal.git from branch 'master'
to ee8d6a877f7709f28da43b0f10baf659876c4bed
- Merge "Don't give user the exact exception description"
- Don't give user the exact exception description
The exact description of the exception especially if related to
cryptography cannot be given to the user as it may be abused by the
attacker.
To fix that, we started to use @ExceptionHandler for all exceptions
in the LoginController as well.
CVE: CVE-2019-12121
Issue-ID: OJSI-92
Change-Id: I100b37ff33d28ebccc2411c3acc62bdb7ce11ca8
Signed-off-by: Piotr Borelowski <p.borelowski@partner.samsung.com>
Reviewed-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Acked-by: Manoop Talasila <talasila@research.att.com>
| m--------- | docs/submodules/portal.git | 0 |
1 files changed, 0 insertions, 0 deletions
diff --git a/docs/submodules/portal.git b/docs/submodules/portal.git -Subproject ba546e970d779a5e87a07b3058a85e1446c3912 +Subproject ee8d6a877f7709f28da43b0f10baf659876c4be |