You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by David Graham <dg...@hotmail.com> on 2003/05/02 17:02:42 UTC
validateMask javascript checks password fields
While looking at this bug:
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19595
it came to my attention that password fields are being checked in the
validateMask javascript. We don't check them in min or max length for
security reasons so we probably should check them in mask either.
Is anyone opposed to removing the password mask check?
David
_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-dev-help@jakarta.apache.org
Re: validateMask javascript checks password fields
Posted by Martin Cooper <ma...@apache.org>.
On Fri, 2 May 2003, David Graham wrote:
> While looking at this bug:
> http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19595
>
> it came to my attention that password fields are being checked in the
> validateMask javascript. We don't check them in min or max length for
> security reasons so we probably should check them in mask either.
>
> Is anyone opposed to removing the password mask check?
Sounds good to me.
--
Martin Cooper
>
> David
>
>
>
>
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-dev-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-dev-help@jakarta.apache.org