Nick Craig-Wood a34d5edfdf config: fix normalization when obscuring passwords - fixes #9507 ...

Interactively-entered passwords were run through NFKC Unicode
normalization before being obscured, which silently rewrote characters
such as ª (U+00AA) to a. The obscured password then revealed to
something different from what the user typed confusing everyone.

Normalization is only needed for the config encryption master
password, so apply it there (in SetConfigPassword) rather than in the
shared checkPassword used for backend password options.

2026-06-15 16:47:45 +01:00

..

configfile

build: fix lint warning after linter upgrade

2025-12-09 16:15:17 +00:00

configflags

serve: support custom http response headers

2026-05-06 12:41:15 +01:00

configmap

config: add more human readable configmap.Simple output

2025-10-02 17:30:08 +01:00

configstruct

build: modernize Go code with go fix for go1.25

2026-02-18 12:11:52 +00:00

flags

build: use sequence Split introduced in go1.24

2025-09-15 12:45:57 +01:00

obscure

build: update logging statements to make json log work - fixes #6038

2024-09-06 17:04:18 +01:00

testdata

Convert source files with crlf to lf

2024-04-18 11:32:45 +02:00

authorize.go

docs: use the term backend name instead of fs name for authorize command

2025-10-02 18:46:16 +02:00

config_read_password_unsupported.go

config: fix problem reading pasted tokens over 4095 bytes

2025-08-16 16:44:35 +01:00

config_read_password.go

config: fix problem reading pasted tokens over 4095 bytes

2025-08-16 16:44:35 +01:00

config_test.go

config: use --password-command to set config file password if supplied

2024-09-06 10:34:29 +01:00

config.go

docs: fix typos in comments and messages

2026-01-18 20:48:33 +01:00

crypt_internal_test.go

config encryption: set, remove and check to manage config file encryption #7859

2024-09-06 10:34:29 +01:00

crypt_test.go

config encryption: set, remove and check to manage config file encryption #7859

2024-09-06 10:34:29 +01:00

crypt.go

config: fix normalization when obscuring passwords - fixes #9507

2026-06-15 16:47:45 +01:00

default_storage_test.go

config: replace defaultConfig with a thread-safe in-memory implementation

2021-05-07 16:04:09 +01:00

default_storage.go

config: replace defaultConfig with a thread-safe in-memory implementation

2021-05-07 16:04:09 +01:00

rc_test.go

rc: config/unlock: rename parameter to configPassword accept old as well

2025-11-20 16:46:01 +00:00

rc.go

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00

ui_internal_test.go

config: fix normalization when obscuring passwords - fixes #9507

2026-06-15 16:47:45 +01:00

ui_test.go

config: fix problem reading pasted tokens over 4095 bytes

2025-08-16 16:44:35 +01:00

ui.go

config: fix normalization when obscuring passwords - fixes #9507

2026-06-15 16:47:45 +01:00