gray-mueller / gray-mueller/full-stack-laundry-system
Password Field Visibility in Enatega Multivendor Admin Dashboard Login Page
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Description:
Upon accessing the Enatega Multivendor Admin Dashboard login page, I observed that when entering the password, the input is not being hidden, compromising the security of user credentials. This poses a potential security risk as sensitive information is visible to onlookers.
Steps to Reproduce:
Open the Enatega Multivendor Admin Dashboard login page.
Enter valid credentials in the respective fields.
Observe that the password entered is not masked or hidden.
Expected Behavior:
The password field should hide the entered characters, displaying them as asterisks or dots, to ensure the confidentiality and security of user passwords.
Actual Behavior:
The password entered in the login page is visible in plain text, raising security concerns.
image
Contributor guide
Research direction
Start at the Enatega Multivendor Admin Dashboard login page and reproduce the issue by entering a password. Trace the login form's password field, then verify that entered characters are masked and that the login flow still accepts valid credentials.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication, frontend
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100