{"push_id":1011318011,"size":9,"distinct_size":9,"ref":"refs/heads/master","head":"6493a3b17ae078b939cd8bb7102bbb25749bfde0","before":"9203a99f86f93e4809a324c85abdeafda144ec5a","commits":[{"sha":"085ea61ff705eb17d0127147cbca8a35182f17bc","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 The user's password is stored as a session attribute without a bundle prefix so retrieve it via the original HttpServletRequest","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/085ea61ff705eb17d0127147cbca8a35182f17bc"},{"sha":"eaa3e75cd1f28e4af68b9570f9c062a8dd1bf8ac","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 Prevent unauthorized users from saving an iframe portlet configuration with @password@ token","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/eaa3e75cd1f28e4af68b9570f9c062a8dd1bf8ac"},{"sha":"58023f64871f36a204816cd53ef7ccd972cc4520","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 Considers users always authorized to configure the iframe portlets with the @password@ token on their own private pages. Anywhere else requires the role","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/58023f64871f36a204816cd53ef7ccd972cc4520"},{"sha":"0aa5b2690c912a9ca321e432dc8491d174d02e4b","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 At runtime do not check if the user is a member of the role before resolving the @password@ token, but protect admin's password when impersonating users","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/0aa5b2690c912a9ca321e432dc8491d174d02e4b"},{"sha":"17023582d46b2e890f11383eb914853ad6f435c5","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 Update description of iframe.password.token.role in portal.properties","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/17023582d46b2e890f11383eb914853ad6f435c5"},{"sha":"ca66117c6105823d646746f38507dff2e1c9cef9","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 Better handling when configured iframe portlet authentication password is null","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/ca66117c6105823d646746f38507dff2e1c9cef9"},{"sha":"2935a143d23be6cc063288abb6d31e33bada099b","author":{"email":"e58a500af6024e28199269f28525e5e7e52e8d04@liferay.com","name":"Stian Sigvartsen"},"message":"LPS-52935 Do not indicate that @password@ token can be used when configuring iframe portlet if session.store.password=false","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/2935a143d23be6cc063288abb6d31e33bada099b"},{"sha":"ef897d29639975f50c6ffd4f26f1cde001855052","author":{"email":"80d4b9300c064bd0fcff144f3bedd2e8a3ac2a85@liferay.com","name":"Tomáš Polešovský"},"message":"LPS-52935 SF","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/ef897d29639975f50c6ffd4f26f1cde001855052"},{"sha":"6493a3b17ae078b939cd8bb7102bbb25749bfde0","author":{"email":"19d87895fd866a870172ad2efba03013e296358f@liferay.com","name":"Brian Chan"},"message":"LPS-52935 SF","distinct":true,"url":"https://api.github.com/repos/shinnlok/liferay-portal/commits/6493a3b17ae078b939cd8bb7102bbb25749bfde0"}]}