Password is not hidden on remote interact pages #734

Closed
opened 4 years ago by elegaanz · 0 comments
elegaanz commented 4 years ago (Migrated from github.com)

If you type your password on a "remote interact" page, anyone can read it, since the type="password" is not set on the <input> : https://github.com/Plume-org/Plume/blob/master/templates/remote_interact_base.rs.html#L24-L28

  • Plume version: 0.4.0
  • Operating system: Linux (but not relevant)
  • Web Browser: Firefox (but not relevant I think)
If you type your password on a "remote interact" page, anyone can read it, since the `type="password"` is not set on the `<input>` : https://github.com/Plume-org/Plume/blob/master/templates/remote_interact_base.rs.html#L24-L28 - **Plume version:** 0.4.0 - **Operating system:** Linux (but not relevant) - **Web Browser:** Firefox (but not relevant I think)
Sign in to join this conversation.
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Plume/Plume#734
Loading…
There is no content yet.