Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use proper password type field for http web client password #7583

Closed
andyfeller opened this issue Nov 4, 2016 · 3 comments
Closed

Use proper password type field for http web client password #7583

andyfeller opened this issue Nov 4, 2016 · 3 comments

Comments

@andyfeller
Copy link

The password field of the InfluxDB web client isn't treated like a password-type input field, which allows browsers to remember values entered as well as not obscuring values typed in said field. This is a pretty big security issue.
screen shot 2016-11-04 at 2 48 59 pm

@toddboom
Copy link
Contributor

toddboom commented Nov 4, 2016

@andyfeller what version of InfluxDB are you using? this should have been fixed in #7286 and made it into a release quite some time ago.

@andyfeller
Copy link
Author

Confirming this doesn't appear to be the case on both the Influx Enterprise data v1.0.0-c1.0.0 package and InfluxDB OSS v1.0.2

@andyfeller
Copy link
Author

It appears this is part of the 1.1.0 release that hasn't been cut yet based upon the change log. So totally worth closing this! Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants