[WICKET-6211] PasswordTextField should clear password by default

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 7.3.0, 8.0.0-M1
• Fix Version/s: 8.0.0-M2, 7.5.0
• Component/s: wicket
• Assignee: Sven Meier
• Reporter: Sven Meier
• Created: 19/Jul/16 21:39
• Updated: 27/Dec/16 16:38
• Resolved: 19/Jul/16 22:04

Description

If the application developer does not take extra care, the password entered via PasswordTextField is stored along with the containing page in the page store.
This should be prevented by default by clearing the model object after each request.

Issue Links

• breaks: WICKET-6215 Test fail when non empty model is set to PasswordTextField
• breaks: SYNCOPE-962 Upgrade to Wicket 7.5.0