hash is also sensitive now

when has might be plaintext, it's sensitive
This commit is contained in:
divinity76 2025-03-19 21:41:01 +01:00 committed by GitHub
commit 399b607987
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -328,6 +328,7 @@ if ($use_auth) {
function tfm_password_verify(
#[\SensitiveParameter]
string $password,
#[\SensitiveParameter]
string $hash
): bool {
// CRYPT_MD5: $1$