We don't need to have editapplication (only showapplication) in the

sensitive array because it doesn't expose the consumer keypair

1 files changed, 1 insertions, 2 deletions

diff --git a/lib/util.php b/lib/util.php
index d1c084e2e..ecf1baa87 100644
--- a/lib/util.php
+++ b/lib/util.php
@@ -1088,8 +1088,7 @@ function common_is_sensitive($action)
         'ApiOauthRequestToken',
         'ApiOauthAccessToken',
         'ApiOauthAuthorize',
-        'showapplication',
-        'editapplication'
+        'showapplication'
     );
     $ssl = null;