[ 
https://issues.apache.org/jira/browse/RANGER-819?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jim Halfpenny updated RANGER-819:
---------------------------------
    Attachment: 0001-RANGER-819-Removed-onpaste-event-from-password-field.patch

Patch to remove onpaste event from password fields in Ranger UI.

> Allow pasting into password fields in Ranger web UI
> ---------------------------------------------------
>
>                 Key: RANGER-819
>                 URL: https://issues.apache.org/jira/browse/RANGER-819
>             Project: Ranger
>          Issue Type: Improvement
>          Components: admin
>    Affects Versions: 0.6.0
>            Reporter: Jim Halfpenny
>              Labels: easyfix, security
>         Attachments: 
> 0001-RANGER-819-Removed-onpaste-event-from-password-field.patch
>
>
> Ranger does not permit pasting values from the clipboard into the password 
> field within the admin UI. This blocks the use of password managers and makes 
> entry of complex passwords difficult. This does not contribute to the 
> security of Ranger and encourages use of less secure passwords and this 
> feature should be removed.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to