webserver: Zero key after storing.

decred · Feb 22, 2023 · 0d42ab6 · 0d42ab6
1 parent 900574b
commit 0d42ab6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/client/webserver/api.go b/client/webserver/api.go
@@ -847,8 +847,8 @@ func (s *WebServer) apiChangeAppPass(w http.ResponseWriter, r *http.Request) {
 			log.Errorf("unable to cache password: %w", err)
 			clearCookie(pwKeyCK, w)
 		} else {
-			zero(key)
 			setCookie(pwKeyCK, hex.EncodeToString(key), w)
+			zero(key)
 		}
 	}