Do not include password in exception message

Bacon · Nov 30, 2015 · a7b5075 · a7b5075
1 parent 47bad9d
commit a7b5075
Showing 1 changed file with 2 additions and 8 deletions.
diff --git a/src/Encryption/AbstractEncryption.php b/src/Encryption/AbstractEncryption.php
@@ -197,17 +197,11 @@ private function encodePassword($password)
         restore_error_handler();
 
         if (false === $encodedPassword) {
-            throw new UnsupportedPasswordException(sprintf(
-                'The password "%s" contains non-latin-1 characters',
-                $password
-            ));
+            throw new UnsupportedPasswordException('Password contains non-latin-1 characters');
         }
 
         if (strlen($encodedPassword) > 32) {
-            throw new UnsupportedPasswordException(sprintf(
-                'The password "%s" is longer than 32 characters',
-                $password
-            ));
+            throw new UnsupportedPasswordException('Password is longer than 32 characters');
         }
 
         return $encodedPassword;