Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-12041

Do not display obfuscated passwords when there's no password set

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 6.4
    • Fix Version/s: 7.1-milestone-1
    • Component/s: Old Core
    • Labels:
      None
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Similar issues:

      Description

      Use case example: you go to the Mail Admin UI and right now you see ****** under the SMTP server password field and users wonder why the password is set by default!

      The propose change is of course making it possible for users to know if a password is set or not but hackers will always find ways anyway and this solves the usability for the majority of users.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                vmassol Vincent Massol
                Reporter:
                vmassol Vincent Massol
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: