[ 
https://issues.apache.org/jira/browse/WICKET-6211?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15384972#comment-15384972
 ] 

ASF subversion and git services commented on WICKET-6211:
---------------------------------------------------------

Commit 4054dbc7f8839a9b6dfee1fcdfc9afe4370724ce in wicket's branch 
refs/heads/master from [~svenmeier]
[ https://git-wip-us.apache.org/repos/asf?p=wicket.git;h=4054dbc ]

WICKET-6211 clear password on detach


> PasswordTextField should clear password by default
> --------------------------------------------------
>
>                 Key: WICKET-6211
>                 URL: https://issues.apache.org/jira/browse/WICKET-6211
>             Project: Wicket
>          Issue Type: Improvement
>          Components: wicket
>    Affects Versions: 7.3.0, 8.0.0-M1
>            Reporter: Sven Meier
>            Assignee: Sven Meier
>            Priority: Minor
>             Fix For: 8.0.0-M2, 7.5.0
>
>
> If the application developer does not take extra care, the password entered 
> via PasswordTextField is stored along with the containing page in the page 
> store.
> This should be prevented by default by clearing the model object after each 
> request.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to