garrensmith commented on issue #976: Browser autocomplete stores db passwords
URL: https://github.com/apache/couchdb-fauxton/issues/976#issuecomment-326546843
 
 
   We have redesigned the replication section for 2.1 Could you upgrade and 
test that.
   
   On 01 Sep 2017, 12:17 PM +0200, Alex Anderson <[email protected]>, 
wrote:
   > If using basic auth, the replication page in Fauxton on couch 2.0 stores 
database passwords.
   > Checked on Chrome, Firefox.
   > Expected Behavior
   > Database passwords probably shouldn't be stored in my browser.
   > Current Behavior
   > Chrome
   > Firefox
   > Possible Solution
   > Add autocomplete="off" attribute to <input> elements which are not 
type="password" but may include passwords.
   > Steps to Reproduce (for bugs)
   >
   > 1. go to fauxton replication page
   > 2. start a replication to a remote server
   > 3. reload the replication page
   > 4. start typing in the remote server URL box
   > 5. observe old URLs including basic auth credentials
   >
   > Your Environment
   >
   > ? Version used:
   >
   >
   > ? Browser Name and version:
   >
   >     ? Firefox 55
   >     ? Chrome 60
   >
   > ? Operating System and version (desktop or mobile): OSX
   >
   > ?
   > You are receiving this because you are subscribed to this thread.
   > Reply to this email directly, view it on GitHub, or mute the thread.
   
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to