id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
22990	Sensitive POST data leaks from complex variables	Vlastimil Zíma	Vlastimil Zíma	"Using `@sensitive_post_parameters()` decorator does not help much, because POST data are leaked through variables which wraps the request, such as dictionaries and tuples. Since there are a lot of wrappers and decorators this is fairly common problem.

I have added temporarily a ValueError into `UserAdmin.add_view` and checked the result. The password is leaked on several occasions. Look for 'secret' in the attached email."	Cleanup/optimization	closed	Core (Other)	dev	Normal	fixed			Accepted	1	0	0	1	0	0