You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Sven Meier (JIRA)" <ji...@apache.org> on 2016/07/19 21:40:20 UTC

[jira] [Created] (WICKET-6211) PasswordTextField should clear password by default

Sven Meier created WICKET-6211:
----------------------------------

             Summary: PasswordTextField should clear password by default
                 Key: WICKET-6211
                 URL: https://issues.apache.org/jira/browse/WICKET-6211
             Project: Wicket
          Issue Type: Improvement
          Components: wicket
    Affects Versions: 8.0.0-M1, 7.3.0
            Reporter: Sven Meier
            Assignee: Sven Meier
            Priority: Minor


If the application developer does not take extra care, the password entered via PasswordTextField is stored along with the containing page in the page store.
This should be prevented by default by clearing the model object after each request.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)