Page MenuHomePhabricator

Copy paste of new password shouldn't be possible
Closed, InvalidPublic

Description

On every mediawiki installation it is possible to copy/paste new password set in field "New password:" into field "Retype new password:".

That behaviour should be prevented.

I noted such behaviour in Firefox (2.0.0.16 & 3.0.5) under linux, under Opera 9.63 it is not possible, so it is possible that is browser bug.


Version: unspecified
Severity: normal
URL: http://en.wikipedia.org/w/index.php?title=Special:ChangePassword

Details

Reference
bz17181

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:28 PM
bzimport set Reference to bz17181.
bzimport added a subscriber: Unknown Object (MLST).

There is nothing we can do for this. It is in the control of browsers (or even in the toolkit) if they allow copy-pasting from one password field to another.