Lukas Reschke abdbf10ebc Do not print exception message ...

In case of an error the error message often contains sensitive data such as the full path which potentially leads to a full path disclosure.

Thus the error message should not directly get displayed to the user and instead be logged.

2015-10-13 14:12:10 +02:00

..

avatar

Do not print exception message

2015-10-13 14:12:10 +02:00

command

Move the filtering of sensitive data to the config class

2015-09-25 11:08:33 +02:00

lostpassword/controller

Expire token after 12h and if user logged-in again

2015-08-22 20:42:45 +02:00