Re: prefilling password

2015-08-04 Thread Lance Java
I've always considered this a bit of a security flaw. Using the javascript console you can show the password in plain text. Eg: alert(document.getElementById('password').value); On 3 Aug 2015 21:13, "Thiago H de Paula Figueiredo" wrote: > On Mon, 03 Aug 2015 15:04:27 -0300, Christine > wrote:

Re: prefilling password

2015-08-03 Thread Thiago H de Paula Figueiredo
On Mon, 03 Aug 2015 15:04:27 -0300, Christine wrote: I have a form with a password field. It gets pre-filled with a previously used password string. How can I prevent the browser and/or Tapestry from putting a value in the password field? This is actually done by the browser, not Tapestry,

Re: prefilling password

2015-08-03 Thread Stephen Nutbrown
Hi, I think it will only prefill it if the password is persisted. I would think the best solution is not to persist the password with @Persist. Thanks, Steve On 3 August 2015 at 19:04, Christine wrote: > > I have a form with a password field. It gets pre-filled with a previously > used passwor

prefilling password

2015-08-03 Thread Christine
I have a form with a password field. It gets pre-filled with a previously used password string. How can I prevent the browser and/or Tapestry from putting a value in the password field? dagdag Christine - To unsubscribe, e-m