21 Jul
2008
21 Jul
'08
3:34 p.m.
Actually you can get the session password with the PersistentLoginManager
(if I understand the term "session password" right):
this.persistentLoginManager.getRememberedPassword(request, response);
I posted this "flaw" already last week on the mailing list but got no
answer. The password is stored in the (session) cookie and can be retrieved
at any time.
----- Original Message -----
From: "Tiago Rinck Caveden" <caveden(a)gmail.com>
To: "XWiki Developers" <devs(a)xwiki.org>
Sent: Monday, July 21, 2008 2:52 PM
Subject: [gsoc] Re: [xwiki-devs] Getting sessions password
On Mon, Jul 21, 2008 at 2:45 PM, MikSan
<scan(a)netvisao.pt> wrote:
So there is now way i can retrive the password ?
I don't really know, but I hope not. :-P
You shouldn't be able to do it.
--
Tiago Rinck Caveden
http://caveden.multiply.com
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs