ErrorHandler: Remove more form fields before serialization

5 years ago · 3d8476efd3
parent d4d4b409b6
commit 3d8476efd3
1 changed files with 6 additions and 0 deletions
--- a/src/Middleware/ErrorHandler.php
+++ b/src/Middleware/ErrorHandler.php
@ -29,6 +29,12 @@ class ErrorHandler implements MiddlewareInterface
    protected $formIgnore = [
        'password',
        'password_confirmation',
+        'password2',
+        'new_password',
+        'new_password2',
+        'new_pw',
+        'new_pw2',
+        '_token',
    ];

    /**