You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Sven Meier (JIRA)" <ji...@apache.org> on 2016/07/19 22:05:20 UTC

[jira] [Resolved] (WICKET-6211) PasswordTextField should clear password by default

     [ https://issues.apache.org/jira/browse/WICKET-6211?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sven Meier resolved WICKET-6211.
--------------------------------
       Resolution: Fixed
    Fix Version/s: 7.5.0
                   8.0.0-M2

By default PasswordTextField nullifies its model object now, #setResetPassword() can be used to change this.

> PasswordTextField should clear password by default
> --------------------------------------------------
>
>                 Key: WICKET-6211
>                 URL: https://issues.apache.org/jira/browse/WICKET-6211
>             Project: Wicket
>          Issue Type: Improvement
>          Components: wicket
>    Affects Versions: 7.3.0, 8.0.0-M1
>            Reporter: Sven Meier
>            Assignee: Sven Meier
>            Priority: Minor
>             Fix For: 8.0.0-M2, 7.5.0
>
>
> If the application developer does not take extra care, the password entered via PasswordTextField is stored along with the containing page in the page store.
> This should be prevented by default by clearing the model object after each request.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)