Uploaded image for project: '{RETIRED} XWiki Lucene Plugin'
  1. {RETIRED} XWiki Lucene Plugin
  2. XPLUCENE-25

Password fields should not be indexed/stored

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 1.6
    • 1.4, 1.5
    • Plugin
    • None
    • security lucene PasswordClass

    Description

      Currently the Lucene plugin indexes and stores all object fields, including password fields. This is a security risk (as then the plugin can be used to search for passwords).

      Attachments

        Activity

          People

            sdumitriu Sergiu Dumitriu
            dward David Ward
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: