James Rhodes 3b1a1ae7e3 [SECURITY] Prevented PhabricatorSetupIssueView from exposing sensitive config options. ... Summary: Currently PhabricatorSetupIssueView will show the current values of configuration options regardless of whether or not they are defined as hidden options. This means that if the MySQL server stops, Phabricator will present the MySQL connection credentials to anyone who can access the Phabricator page. Test Plan: Stop the MySQL server for a Phabricator instance. It should display 'hidden' instead of the MySQL password. Reviewers: epriestley Reviewed By: epriestley CC: aran, Korvin Differential Revision: https://secure.phabricator.com/D5596		2013-04-06 00:39:53 -07:00
..
PhabricatorConfigResponse.php	[SECURITY] Prevented PhabricatorSetupIssueView from exposing sensitive config options.	2013-04-06 00:39:53 -07:00