Closed (fixed)
Project:
Unmask Password
Version:
7.x-1.0-alpha1
Component:
Code
Priority:
Major
Category:
Bug report
Assigned:
Reporter:
Created:
11 Feb 2012 at 06:04 UTC
Updated:
11 Feb 2012 at 16:57 UTC
On clicking the checkbox to show the entered password, the field type changes from "password" to "textfield". In XHTML, this can be exploited to see previously entered passwords by double-clicking the text field.
Comments
Comment #1
vaidik commentedWill be released in the next dev and then alpha2.