gray-mueller / gray-mueller/full-stack-document-solution

Password Field Visibility in Enatega Multivendor Admin Dashboard Login Page

未关闭 适合新手
#165 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
TypeScript
星标
0
派生
0
PR 合并指标
30 天内没有已合并 PR

描述

Description:
Upon accessing the Enatega Multivendor Admin Dashboard login page, I observed that when entering the password, the input is not being hidden, compromising the security of user credentials. This poses a potential security risk as sensitive information is visible to onlookers.

Steps to Reproduce:
Open the Enatega Multivendor Admin Dashboard login page.
Enter valid credentials in the respective fields.
Observe that the password entered is not masked or hidden.

Expected Behavior:
The password field should hide the entered characters, displaying them as asterisks or dots, to ensure the confidentiality and security of user passwords.

Actual Behavior:
The password entered in the login page is visible in plain text, raising security concerns.

image

贡献指南

打开贡献指南

调研方向

首先打开 Enatega Multivendor Admin Dashboard 的登录页面,并使用有效凭据复现该问题。找到该页面使用的密码输入框,并验证其当前行为。当输入的字符以圆点或星号的形式被隐藏,同时登录流程仍接受有效凭据时,工作即完成。

由索引模型根据 Issue 内容生成。

评估

技术栈
typescript
领域
authentication, frontend
Issue 类型
缺陷
难度
2/5
预计耗时
1-3 小时
活跃度
冷清
描述清晰度
基本清楚
新手友好度
68/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。