Uploaded image for project: 'SignServer'
  1. SignServer
  2. DSS-1743

Disable autocomplete for password field in demo web page

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 5.2.0.Beta1, 5.2.0.Final
    • Component/s: Client Web
    • Labels:
      None
    • Stakeholder:
      Customer
    • Epic Link:
    • Sprint:
      SignServer-Sprint 107, SignServer-Sprint 108

      Description

      The pdfsign.jsp sample PDF signing web page on the demo web page of public web does not have auto completion turned off. This means the risk that the password gets stored in the web browser.

      Unfortunately we can not set the attribute "autocomplete=off" as the web page is "XHTML 1.0 Strict".

      • After (or as part of) the planned improvement of the public web pages DSS-1634 and if we then changed doctype we could add this attribute.
      • For more details see the attachment to the linked support ticket.
      • Note: We might need JSF 2.2 to be able to "passthrough" the autocomplete attribute.

        Attachments

          Activity

            People

            Assignee:
            marcus.lundblad@primekey.se Marcus Lundblad
            Reporter:
            markus Markus Kilås
            Verified by:
            Markus Kilås
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 hour Original Estimate - 1 hour
                1h
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 hours, 33 minutes
                2h 33m