yahoo-eng-team team mailing list archive

[Miguel Grinberg <miguel.grinberg@xxxxxxxxx>]

Public bug reported:

In the launch stack form, any heat template parameters that are marked
as hidden are presented as a regular input field, exactly the same as a
normal string field.

Given that hidden fields are marked as such due to their sensitive
nature, it would be better to use a password entry field for them.

How to reproduce:

1. Use the following template:

heat_template_version: 2013-05-23
parameters:
  password:
    type: string
    hidden: true

2. Note how in the Launch Stack form for the above template the
"password" field at the bottom shows characters as you type them.

** Affects: horizon
     Importance: Undecided
     Assignee: Miguel Grinberg (miguelgrinberg)
         Status: New


** Tags: heat

** Changed in: horizon
     Assignee: (unassigned) => Miguel Grinberg (miguelgrinberg)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1362846

Title:
  stack parameters marked as hidden should use a password field

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  In the launch stack form, any heat template parameters that are marked
  as hidden are presented as a regular input field, exactly the same as
  a normal string field.

  Given that hidden fields are marked as such due to their sensitive
  nature, it would be better to use a password entry field for them.

  How to reproduce:

  1. Use the following template:

  heat_template_version: 2013-05-23
  parameters:
    password:
      type: string
      hidden: true

  2. Note how in the Launch Stack form for the above template the
  "password" field at the bottom shows characters as you type them.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1362846/+subscriptions