Ok Christophe,
Guide me what part of validation-rule.xml, I will modify to make it validate
clientside.

Jignesh Patel
____________________________________________________________ 
Bang Software Technologies Pvt Ltd

[EMAIL PROTECTED]  

(O) 022 �28304761 Ext. 17
       022- 28343742 Ext. 17 

Software Technology Parks Of India(STPI)
Network Operation Centre
Plot No. AM-3 M.I.D.C Cross Road �A�,
Marol Industrial Area,
Andheri(E), Mumbai -93

Information contained in this transmission to the named addressee, including any
attachments thereto, should be considered the proprietary and confidential
information of the sender.  As a condition for viewing the information, the
sender agrees to keep the information confidential, to refrain from disclosing
the information, directly or indirectly, and to refrain from any actions that
would constitute or facilitate unauthorized access to the information without
express permission from the sender.   The recipient also acknowledges and agrees
to respect sender's intellectual property rights in and to the information.  If
the recipient of this transmission is not the named addressee, the recipient
should immediately notify the sender and destroy the information transmitted
without making any copy or distribution thereof. 

On Mon, 15 Mar 2004 14:06 , Christoph Kutzinski <[EMAIL PROTECTED]> sent:

>Joe Hertz wrote:
>
>> Check the Bugzilla. I believe it works in the  tag, but you 
>> won't get a javascript popup.
>> 
>> If memory serves, there's a security concern about using minlength in 
>> password fields -- basically the logic goes something like, "Do you really 
>> want to be providing a front end validation that tells a cracker how long his 
>> randomly guessed password attempts must be".
>
>What should be the problem with this?
>You are only telling him, how long they must be AT LEAST. Nothing about 
>how long the can be at most.
>If you would say, it can be dangerous to expose the maxlength of the 
>password to the user then I could understand it. Though lots of sites do 
>exactely this in reality, so it cannot be such a big security danger.
>
>greets,
>Christoph
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>





---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to