-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[stable10] Return "password fields" only if public-link password is set #35544
Conversation
Codecov Report
@@ Coverage Diff @@
## stable10 #35544 +/- ##
==============================================
+ Coverage 64.8% 64.81% +<.01%
- Complexity 20201 20205 +4
==============================================
Files 1294 1294
Lines 77240 77251 +11
Branches 1301 1301
==============================================
+ Hits 50056 50070 +14
+ Misses 26799 26796 -3
Partials 385 385
Continue to review full report at Codecov.
|
Codecov Report
@@ Coverage Diff @@
## stable10 #35544 +/- ##
==============================================
+ Coverage 64.81% 64.81% +<.01%
- Complexity 20204 20205 +1
==============================================
Files 1294 1294
Lines 77250 77251 +1
Branches 1301 1301
==============================================
+ Hits 50069 50070 +1
Misses 26796 26796
Partials 385 385
Continue to review full report at Codecov.
|
The iOS client uses the presence of these fields to determine if a password is required. Despite their names they are historically used to store pw-hashes for public-links.
e85f44f
to
0c09977
Compare
changes in test code looks good 👍 |
Please port on 10.2.1 release once approved/merged |
PR for |
Description
Show "share_with" and "share_with_displayname" fields for public-links only if a share-password
is set.
Related Issue
Motivation and Context
The iOS client uses the presence of these fields to determine if a password is required. Despite their names they are historically used to store pw-hashes for public-links.
Due to a recent security fix (31b47dc) which replaced the hashes with
***redacted***
, share_with and share_with_displayname was never null thus for the client it looked like all links have passwords.How Has This Been Tested?
Adjusted acceptance tests
Types of changes
Checklist:
Open tasks: