The following diff fixes this critical security flaw for all major browsers…

--- ./WEB-INF/classes/eu/markov/jenkins/plugin/mvnmeta/MavenMetadataParameterDefinition/config.jelly	2014-02-14 10:10:22.000000000 +0100
+++ ./eu/markov/jenkins/plugin/mvnmeta/MavenMetadataParameterDefinition/config.jelly	2014-04-15 15:56:47.000000000 +0200
@@ -36,6 +36,6 @@
     <f:entry title="${%Repository Username}" field="username">
-        <f:textbox name="parameter.username" value="${instance.username}" />
+        <f:textbox name="parameter.username" value="${instance.username}" autocomplete="off" />
     </f:entry>
     <f:entry title="${%Repository Password}" field="password">
-        <f:password name="parameter.password" value="${instance.password}" />
+        <f:password name="parameter.password" value="${instance.password}" autocomplete="off" />
     </f:entry>
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to