On Mon, Oct 10, 2016 at 4:43 PM, Carsten Ziegeler <cziege...@apache.org> wrote: > ...we should filter these values in ResourceResolverControl > for getting the attributes, otherwise the using bundle can be fetch from > the attributes. Currently that code just filters the password...
I have added tests in http://svn.apache.org/r1764845 , AUTH_SERVICE_BUNDLE is correctly hidden. -Bertrand
