Subject: Re: bug#30186: 27.0.50; Password is not hidden in read-passwd

From: Eli Zaretskii <[email-masked]>
Date: Sun, 21 Jan 2018 17:59:19 +0200

> From: Juri Linkov <[email-masked]>
> Date: Sat, 20 Jan 2018 23:29:35 +0200
> 
> This is a regression and a security flaw.
> 
> Reading a password with ‘read-passwd’ doesn't hide inserted characters
> anymore as it used to do in older versions.
> 
> When the user has such customization:
> 
>   (custom-set-variables
>    '(yank-excluded-properties t))
> 
> evaluating
> 
>   (read-passwd "Prompt: ")
> 
> and yanking a password to the minibuffer with 'C-y' doesn't hide it
> as it did in Emacs 25.
> 
> This can be traced down to ‘remove-yank-excluded-properties’
> where ‘set-text-properties’ used to leave ‘display’ properties
> (with ‘.’ over inserted characters) in the minibuffer.

Can you spot the commit which causes this, or bisect to find it?

Thanks.