Thanks to visit codestin.com
Credit goes to github.com

Skip to content

[Security] Passwords are not encoded when algorithm set to "true" #34725

Closed
@mhujer

Description

@mhujer

Symfony version(s) affected: 4.3.8

Description

When the algorithm is set to true, the passwords are not encoded at all (they are stored as plaintext). I would expect to get an exception instead.

security:
    encoders:
        App\User\User:
            algorithm: true

Additional context
When you mistype the algorithm (e.g. bcryp or aut), an exception is thrown as expected.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions