Ticket #10777: 20090410_auth_form_reset_pwd.diff

django/contrib/auth/forms.py

@@ -96 +96 @@
     def get_user(self):
         return self.user_cache
 
+    def is_valid(self):
+        ret = super(AuthenticationForm, self).is_valid()
+        # TODO: delete self.fields["password"] value for security reasons
+        return ret
+
 class PasswordResetForm(forms.Form):
     email = forms.EmailField(label=_("E-mail"), max_length=75)