gray-mueller / gray-mueller/full-stack-document-solution
Password Field Visibility in Enatega Multivendor Admin Dashboard Login Page
- 主要语言
- TypeScript
- 星标
- 0
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
描述
Description:
Upon accessing the Enatega Multivendor Admin Dashboard login page, I observed that when entering the password, the input is not being hidden, compromising the security of user credentials. This poses a potential security risk as sensitive information is visible to onlookers.
Steps to Reproduce:
Open the Enatega Multivendor Admin Dashboard login page.
Enter valid credentials in the respective fields.
Observe that the password entered is not masked or hidden.
Expected Behavior:
The password field should hide the entered characters, displaying them as asterisks or dots, to ensure the confidentiality and security of user passwords.
Actual Behavior:
The password entered in the login page is visible in plain text, raising security concerns.
image
贡献指南
调研方向
首先打开 Enatega Multivendor Admin Dashboard 的登录页面,并使用有效凭据复现该问题。找到该页面使用的密码输入框,并验证其当前行为。当输入的字符以圆点或星号的形式被隐藏,同时登录流程仍接受有效凭据时,工作即完成。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- typescript
- 领域
- authentication, frontend
- Issue 类型
- 缺陷
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 活跃度
- 冷清
- 描述清晰度
- 基本清楚
- 新手友好度
- 68/100