Hello fellow CloudStackers,

Today I was working on CLOUDSTACK-5235, which is a security issue, and I
noticed a variable ‘md5Hashed’ in the javascript that does not seem to be
useful at all. This variable was used to control if we hash or not the
password of users in the user side (browser). However, we no longer hash
the password on the user side. All of the password processing is executed
in the server side according to the priority of hashing mechanism defined
by the administrator.

I am addressing this cleanup with this PR
https://github.com/apache/cloudstack/pull/2555.

If you have any objections regarding this variable and its relate code
removal, please do so. Otherwise, we will proceed to remove it.

--
Rafael Weingärtner

Reply via email to