Xirt/XirtCMS — Issue #10: Administrative component 'Users' returns password hash
Author: Xirt
Created: 2012-03-08 14:31:59+00:00
State: open
Labels: bug

The User class should be modified to not ever send the password hash when requested to ensure higher security. Currently this information is sent in ContentViewer::showItem() on line 76.