Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-66

Set autocomplete off for fields that contains sensitive data

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 0.4.0
    • Component/s: None
    • Labels:
      None

      Description

      Summary :
      The form in login.jsp uses auto completion on line 55, which allows some browsers to retain sensitive information in their history.Auto completion of forms allows some browsers to retain sensitive information in their history.

      Explanation :
      With auto completion enabled, some browsers retain user input across sessions, which could allow someone using the computer after the initial user to see information previously submitted.

      Recommendation :
      Explicitly disable auto completion on forms or sensitive inputs. By disabling auto completion, information previously entered will not be presented back to the user as they type. It will also disable the "remember my password" functionality of most major browsers.

      How to verify:
      When Logging into the system, browser shouldn't allow to the user to save the password. Currently browser is asking the user to save the password.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                vel Velmurugan Periasamy
                Reporter:
                vel Velmurugan Periasamy
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: