#3409: PasswordInput that doesn't render value in newforms ---------------------------------+------------------------------------------ Reporter: [EMAIL PROTECTED] | Owner: adrian Status: new | Component: django.newforms Version: SVN | Keywords: PasswordInput security widget Stage: Unreviewed | Has_patch: 1 ---------------------------------+------------------------------------------ The PasswordInput widget in newforms renders its value to html which means the password is in cleartext in the html. That's fine in some situations, but it's common for security to output an empty password field and have the user enter it again (e.g. if log in fails or registration form does not validate). I suggest either: A separate widget, e.g. PrivatePasswordInput, see widgets.diff Or a parameter for the existing PasswordInput, see widgets2.diff
-- Ticket URL: <http://code.djangoproject.com/ticket/3409> Django Code <http://code.djangoproject.com/> The web framework for perfectionists with deadlines --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Django updates" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/django-updates?hl=en -~----------~----~----~----~------~----~------~--~---
