tapestry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Howard M. Lewis Ship (JIRA)" <j...@apache.org>
Subject [jira] Updated: (TAP5-87) PasswordField should not update its value parameter when the submitted value is blank
Date Fri, 31 Oct 2008 18:07:44 GMT

     [ https://issues.apache.org/jira/browse/TAP5-87?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Howard M. Lewis Ship updated TAP5-87:
-------------------------------------

    Summary: PasswordField should not update its value parameter when the submitted value
is blank  (was: Add a parameter to PasswordField component to populate the password value)

> PasswordField should not update its value parameter when the submitted value is blank
> -------------------------------------------------------------------------------------
>
>                 Key: TAP5-87
>                 URL: https://issues.apache.org/jira/browse/TAP5-87
>             Project: Tapestry 5
>          Issue Type: Improvement
>    Affects Versions: 5.0.15
>            Reporter: Alex Kotchnev
>            Assignee: Howard M. Lewis Ship
>
> Currently, the PasswordField component does not display it's value. Although this indeed
represents best practices in handling passwords (e.g. if the password field did display its
value although masked, it would still be visible in the source), the current behavior stumps
new users and unnecessarily enforces a particular process (e.g. never display the password)
or forces a user to split page containing the password field (e.g. what would have other in
orderwise been a single page to create and update a value, now has to be two different pages)
to avoid validation issues. 
> The requested parameter (e.g. "displayValue") would contain a warning in bold that displaying
the password value could be a security issue (and potentially log a warning). The default
value of the parameter should be "false", that is it wouldn't display the password, unless
explicitly enabled. 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


Mime
View raw message