You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tapestry.apache.org by "Howard M. Lewis Ship (JIRA)" <ji...@apache.org> on 2008/10/31 19:07:44 UTC
[jira] Updated: (TAP5-87) PasswordField should not update its value
parameter when the submitted value is blank
[ https://issues.apache.org/jira/browse/TAP5-87?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Howard M. Lewis Ship updated TAP5-87:
-------------------------------------
Summary: PasswordField should not update its value parameter when the submitted value is blank (was: Add a parameter to PasswordField component to populate the password value)
> PasswordField should not update its value parameter when the submitted value is blank
> -------------------------------------------------------------------------------------
>
> Key: TAP5-87
> URL: https://issues.apache.org/jira/browse/TAP5-87
> Project: Tapestry 5
> Issue Type: Improvement
> Affects Versions: 5.0.15
> Reporter: Alex Kotchnev
> Assignee: Howard M. Lewis Ship
>
> Currently, the PasswordField component does not display it's value. Although this indeed represents best practices in handling passwords (e.g. if the password field did display its value although masked, it would still be visible in the source), the current behavior stumps new users and unnecessarily enforces a particular process (e.g. never display the password) or forces a user to split page containing the password field (e.g. what would have other in orderwise been a single page to create and update a value, now has to be two different pages) to avoid validation issues.
> The requested parameter (e.g. "displayValue") would contain a warning in bold that displaying the password value could be a security issue (and potentially log a warning). The default value of the parameter should be "false", that is it wouldn't display the password, unless explicitly enabled.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org