From 465aac14f322117b76378211404b66a6b535d06d Mon Sep 17 00:00:00 2001
From: Philipp Schafft <lion@lion.leolix.org>
Date: Tue, 8 May 2018 07:24:30 +0000
Subject: [PATCH] Fix: Do not report hashed user passworts in user list.

---
 src/auth_htpasswd.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/auth_htpasswd.c b/src/auth_htpasswd.c
index efeb0588..6d4b7b7a 100644
--- a/src/auth_htpasswd.c
+++ b/src/auth_htpasswd.c
@@ -391,7 +391,6 @@ static auth_result htpasswd_userlist(auth_t *auth, xmlNodePtr srcnode)
         htpasswd_user *user = (htpasswd_user *)node->key;
         newnode = xmlNewChild(srcnode, NULL, XMLSTR("user"), NULL);
         xmlNewTextChild(newnode, NULL, XMLSTR("username"), XMLSTR(user->name));
-        xmlNewTextChild(newnode, NULL, XMLSTR("password"), XMLSTR(user->pass));
         node = avl_get_next(node);
     }
     thread_rwlock_unlock(&state->file_rwlock);