mahara-contributors team mailing list archive

[Jan-Christoph Borchardt <jan@xxxxxxxxxxx>]

Public bug reported:

»On its login page, Mahara uses JavaScript to set focus on the user name
text field so the user can sign in to the account with least effort
possible.

However, due to the incompleteness and the placement of the JavaScript,
there is a possibility that the user’s password may get revealed (in the
user name text field of the login form) if the user attempts to enter
their account details before the login page completely loads.«

(text copied from http://www.conetrees.com/2009/12/blog/usability-
spotter-6-the-twitter-login-page-password-revelation-issue where I got
the idea to report this bug.)

The bug occured in a usability test about half a year ago. It may
already be fixed but I suppose reporting erroneously is better than not
at all. :)

** Affects: mahara
     Importance: Undecided
         Status: New

-- 
password gets revealed due to JavaScript focusing on username field
https://bugs.launchpad.net/bugs/543766
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
»On its login page, Mahara uses JavaScript to set focus on the user name text field so the user can sign in to the account with least effort possible.

However, due to the incompleteness and the placement of the JavaScript, there is a possibility that the user’s password may get revealed (in the user name text field of the login form) if the user attempts to enter their account details before the login page completely loads.«

(text copied from http://www.conetrees.com/2009/12/blog/usability-spotter-6-the-twitter-login-page-password-revelation-issue where I got the idea to report this bug.)

The bug occured in a usability test about half a year ago. It may already be fixed but I suppose reporting erroneously is better than not at all. :)