cloudflare / cloudflare/cloudflare-plugin-frontend
API key field uses regular text type input
Open
enhancement
- Dominant language
- JavaScript
- Stars
- 35
- Forks
- 22
- PR merge metrics
- No merged PRs in 30d
Description
The input field for API key on the login screen uses a regular `text` type, instead of `password`.
This dramatically increases the amount of places an API key is exposed.
For example browsers will show the full key as a form suggestion (image is with a revoked key).
I don't see a reason to not use a password type field here.
Contributor guide
Assessment
This issue has not been assessed yet.