gray-mueller / gray-mueller/full-stack-document-solution
Password Field Visibility in Enatega Multivendor Admin Dashboard Login Page
- 主要言語
- TypeScript
- スター
- 0
- フォーク
- 0
- PR マージ指標
- 30日以内にマージされた PR はありません
説明
Description:
Upon accessing the Enatega Multivendor Admin Dashboard login page, I observed that when entering the password, the input is not being hidden, compromising the security of user credentials. This poses a potential security risk as sensitive information is visible to onlookers.
Steps to Reproduce:
Open the Enatega Multivendor Admin Dashboard login page.
Enter valid credentials in the respective fields.
Observe that the password entered is not masked or hidden.
Expected Behavior:
The password field should hide the entered characters, displaying them as asterisks or dots, to ensure the confidentiality and security of user passwords.
Actual Behavior:
The password entered in the login page is visible in plain text, raising security concerns.
image
コントリビューションガイド
調査の方向性
Start by opening the Enatega Multivendor Admin Dashboard login page and reproducing the issue with valid credentials. Locate the password input used by that page and verify its current behavior. The work is done when entered characters are masked as dots or asterisks while the login flow still accepts valid credentials.
索引モデルが issue の本文から書いたものです。
評価
- 技術スタック
- typescript
- 領域
- authentication, frontend
- issue の種類
- バグ
- 難易度
- 2/5
- 見積もり時間
- 1〜3時間
- 活発さ
- 静か
- 明瞭さ
- おおむね明確
- 初心者へのやさしさ
- 68/100