[jira] [Closed] (OFBIZ-9471) Set autocomplete to off for all the password fields.

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Closed] (OFBIZ-9471) Set autocomplete to off for all the password fields.

Nicolas Malin (Jira)

     [ https://issues.apache.org/jira/browse/OFBIZ-9471?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arun Patidar closed OFBIZ-9471.
-------------------------------
       Resolution: Fixed
    Fix Version/s: Upcoming Release

Committed in plugin at revision 1801325
Committed in ofbiz-framework at revision 1801324

Thanks Ritesh Kumar for your contribution.



> Set autocomplete to off for all the password fields.
> ----------------------------------------------------
>
>                 Key: OFBIZ-9471
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9471
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework
>            Reporter: Ritesh Kumar
>            Assignee: Arun Patidar
>            Priority: Minor
>             Fix For: Upcoming Release
>
>         Attachments: OFBIZ-9471-FRAMEWORK.patch, OFBIZ-9471-PLUGIN.patch
>
>
> The login and Forget password screens have password inputs. It is a best practice to disable autocomplete on the password field as it will avoid caching sensitive data on client site (CC numbers) and avoid storing the password in an insecure and hackable client-site database.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)