[VALIDATOR-151] [validator] Password validation revealed in javascript

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 1.1.1 (alpha)
• Component/s: JavaScript

Environment

Operating System: other
Platform: Other

• Bugzilla Id: 23652
• Assignee: Unassigned
• Reporter: David Graham
• Created: 07/Oct/03 21:08
• Updated: 12/Nov/07 19:25
• Resolved: 23/Nov/06 00:06

Description

The javascript does not validate password fields for security reasons; however,
any rules defined on a password field still show up in the javascript (they're
just not used). The min/max length and mask properties reveal sensitive
information about the server-side password validation structure. The best
solution at this time is to not use validator to check password fields at all
but we need a better solution in the long run.

See bug# 12473 for other details.