Red Hat Bugzilla – Bug 173314
HTTP Proxy password shown in clear text
Last modified: 2007-07-31 11:29:53 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.7.12) Gecko/20050921 Red Hat/1.0.7-1.4.1 Firefox/1.0.7
Description of problem:
Go to Satellite Tools -> Satellite Configuration. The "HTTP proxy password" is shown in clear text. As this is a password it should use <input type="password">. There should probably also be 2 of them.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Go to Satellite Tools -> Satellite Configuration
Actual Results: Joe User standing near administrator views proxy details and goes on pr0n downloading spree safe in the knowledge that he's not using his own login details. Sexual harassment lawsuits against all our large corporate customers, and the moral collapse of society.
Expected Results: ********
Also, it would be useful to be able to leave authentication details blank.
satellite-sync should prompt for them interactively if required.
*** Bug 144384 has been marked as a duplicate of this bug. ***
1) Nav to Satellite Tools -> Satellite Configuration
2) verify that the HTTP Proxy Password field shows ***** when you type
in a password.
3) submit form. verify that it still shows *****
verified in stage, and verified content of satellite to match previously blessed
Closing upon release of RHN 406