diff options
author | Dan Church <h3xx@users.noreply.github.com> | 2023-04-23 09:28:27 -0500 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-04-23 10:28:27 -0400 |
commit | 67da4c1b259e9d000535f35974cf12051c1c42b5 (patch) | |
tree | fa253d23def011b6763a78b0c366d1d4c8cccfe3 /modules/indexer | |
parent | b3e849d1d65799ed08565f56b6356f346e23013f (diff) | |
download | gitea-67da4c1b259e9d000535f35974cf12051c1c42b5.tar.gz gitea-67da4c1b259e9d000535f35974cf12051c1c42b5.zip |
Set type="password" on all auth_token fields (#22175)
Set `type="password"` on all `auth_token` fields
Seen when migrating from other hosting platforms.
1. Prevents exposing the token to screen capture/cameras/eyeballs.
2. Prevents the browser from saving the value in its autocomplete
dictionary, which often is not secure.
![exposed auth
token](https://user-images.githubusercontent.com/615684/208541005-e2c9c6b0-3c6c-4a56-95d9-357b987aa0c8.png)
Closes #22174
---------
Signed-off-by: Dan Church <amphetamachine@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>
Diffstat (limited to 'modules/indexer')
0 files changed, 0 insertions, 0 deletions