From cdabb9d74c93bca30a6a129bb9c6774e4c0212e8 Mon Sep 17 00:00:00 2001 From: Olivier Dony Date: Wed, 16 May 2018 12:17:14 +0200 Subject: [FIX] auth_signup: remove password from welcome message Revision 054c68689b58f554e9433938644f2960720e08ef added by mistake the password of the new user in the welcome message that is sent to users who signed up with an invitation token. There is no need for this, the user has just chosen their password, and we should not send them a copy which could be compromised on the way to their inbox or later in their inbox. It may also give users the impression that their passwords is stored in cleartext in the database, even when that is not the case. This patch minimalizes changes to the template and its translations. For existing databases where the code is updated without re-syncing the template, the password will simply be missing in the message (until a resync of auth_signup module is done) --- addons/auth_signup/data/auth_signup_data.xml | 1 - 1 file changed, 1 deletion(-) (limited to 'addons/auth_signup/data') diff --git a/addons/auth_signup/data/auth_signup_data.xml b/addons/auth_signup/data/auth_signup_data.xml index b9f88893d2a..b3364a51658 100644 --- a/addons/auth_signup/data/auth_signup_data.xml +++ b/addons/auth_signup/data/auth_signup_data.xml @@ -116,7 +116,6 @@

Your login: ${object.email}
- Your password: ${ctx['password']}

To gain access to your account, you can use the following link: -- cgit v1.2.3