Comparing master...fix-9507-password-normalization · rclone/rclone · GitHub
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: rclone/rclone
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: rclone/rclone
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: fix-9507-password-normalization
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 3 files changed
  • 1 contributor

Commits on Jun 15, 2026

  1. config: fix normalization when obscuring passwords - fixes #9507 

    Interactively-entered passwords were run through NFKC Unicode
normalization before being obscured, which silently rewrote characters
such as ª (U+00AA) to a. The obscured password then revealed to
something different from what the user typed confusing everyone.

Normalization is only needed for the config encryption master
password, so apply it there (in SetConfigPassword) rather than in the
shared checkPassword used for backend password options.
    @ncw
    ncw committed Jun 15, 2026
    Configuration menu
    Copy the full SHA
    a34d5ed View commit details
    Browse the repository at this point in the history
Loading