Uploaded image for project: 'Wicket'
  1. Wicket
  2. WICKET-591

SignInPanel is not returning raw input

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Trivial
    • Resolution: Fixed
    • 1.2.6
    • 1.3.0-beta2
    • wicket-auth-roles
    • None
    • All

    Description

      The SignInPanel's getPassword()-method is returning the password via "password.getModelObjectAsString();". This will filter any "special" characters like !,$, or & from the input. For (strong?) passwords this may not be desirable. (See also http://cwiki.apache.org/WICKET/validating-passwordtextfield.html)

      I fixed this by returning "password.getInput();" from the method, although this may introduce other security-problems like SQL-injection.

      Maybe a flag would be better solution?

      Attachments

        Activity

          People

            almaw Alastair Maw
            hszillat Holger Szillat
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: