Backport Hash superadmin password security improvment to 18.4.x

Development
1

Hi everyone,

I’d like to backport this important security improvment Loading... to 18.4.x branch. The commit that is doing it is not very complex (XWIKI-22257: Hash the superadmin password · xwiki/xwiki-platform@e5f6530 · GitHub) and I doubt it would cause stability issues, and on the contrary it can probably improve a lot security of instances in production.

I’m opening the vote until friday 18th.

Here’s my +1

2

+1 Thx

3

Why not also on 17.10.x? I assume it will be maintained for quite some time (given the history of 16.10.x) and it would be good to have it there, too.

Anyway, +1, thank you!

4

Because it depends on Loading... which hasn’t been backported (too dangerous for stability)

5

I guess it would be interesting to revisit that decision once we have some more data on that “dangerous” part if we’ll indeed maintain 17.10.x for a longer time similar to 16.10.x.

6

+1

7

+1

Thanks,
Alex

8

+1 thanks

9

Closing this vote with 6 +1. I performed the backport today.