[
https://issues.apache.org/jira/browse/OFBIZ-1106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12535988
]
Jacques Le Roux commented on OFBIZ-1106:
----------------------------------------
Thanks for comment Dan,
Actually, I did not criticise your patch (even if you found some advices in my
comment ;o). I tried it since then and it's ok to me. The only point was that a
new user will not see any chars when typing and may be wondering if the POS is
not working or such
I understand and agree about your security concerns. For the password lenght we
could enforce the number of characters. There is already something like that in
OFBiz (see security.properties). For the number of chars seen on screen (number
of * actually) we could use a random factor (x3, x5) when rendering each
character.
Maybe your solution is better, it's just that I'm worrying about red herrings
;o)
Any opinion anybody (aleady 2 for, one wondering) ?
> Passwords in POS are shown in clear text
> ----------------------------------------
>
> Key: OFBIZ-1106
> URL: https://issues.apache.org/jira/browse/OFBIZ-1106
> Project: OFBiz
> Issue Type: Improvement
> Components: pos
> Affects Versions: SVN trunk
> Environment: All
> Reporter: Chris Lombardi
> Assignee: Jacques Le Roux
> Priority: Minor
> Attachments: input-contents-hidden.patch
>
>
> Passwords entered in the POS are displayed in the clear in the POS input
> panel.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
