From d654ff6ddec48348dcf2ce056d6de2f0995e2e5e Mon Sep 17 00:00:00 2001
From: Angie Byron <webchick@24967.no-reply.drupal.org>
Date: Sat, 29 Jan 2011 10:08:45 +0000
Subject: #690980 by Dave Reid, grendzy, cwgordon7: Security hardening: Ensure
 password fields are empty on display.

---
 includes/form.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'includes')

diff --git a/includes/form.inc b/includes/form.inc
index 7f8cbc64b..d19c82ada 100644
--- a/includes/form.inc
+++ b/includes/form.inc
@@ -3724,7 +3724,7 @@ function theme_textarea($variables) {
 function theme_password($variables) {
   $element = $variables['element'];
   $element['#attributes']['type'] = 'password';
-  element_set_attributes($element, array('id', 'name', 'value', 'size', 'maxlength'));
+  element_set_attributes($element, array('id', 'name', 'size', 'maxlength'));
   _form_set_class($element, array('form-text'));
 
   return '<input' . drupal_attributes($element['#attributes']) . ' />';
-- 
cgit v1.2.3