#30776: AuthenticationForm's username field doesn't set maxlength HTML 
attribute.
------------------------------+----------------------------------------
     Reporter:  felixxm       |                    Owner:  Sam Reynolds
         Type:  Bug           |                   Status:  assigned
    Component:  contrib.auth  |                  Version:  master
     Severity:  Normal        |               Resolution:
     Keywords:                |             Triage Stage:  Accepted
    Has patch:  1             |      Needs documentation:  0
  Needs tests:  0             |  Patch needs improvement:  0
Easy pickings:  0             |                    UI/UX:  0
------------------------------+----------------------------------------

Comment (by felixxm):

 @gopackgo90 After reconsideration I don't think that `MaxLengthValidator`
 is really important here since a browser truncates `username` when we set
 `maxlength` HTML attribute. This is not a `ModelForm` so we don't risk
 `IntegrityError` etc. even if someone send manipulated POST data.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/30776#comment:5>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/065.46a9545efca53887450820ec4d3915b2%40djangoproject.com.

Reply via email to