mirror of
https://github.com/go-gitea/gitea
synced 2024-12-26 03:24:31 +01:00
67da4c1b25
Set `type="password"` on all `auth_token` fields Seen when migrating from other hosting platforms. 1. Prevents exposing the token to screen capture/cameras/eyeballs. 2. Prevents the browser from saving the value in its autocomplete dictionary, which often is not secure. ![exposed auth token](https://user-images.githubusercontent.com/615684/208541005-e2c9c6b0-3c6c-4a56-95d9-357b987aa0c8.png) Closes #22174 --------- Signed-off-by: Dan Church <amphetamachine@gmail.com> Co-authored-by: silverwind <me@silverwind.io> |
||
---|---|---|
.. | ||
admin | ||
api/packages/pypi | ||
base | ||
code | ||
custom | ||
devtest | ||
explore | ||
org | ||
package | ||
projects | ||
repo | ||
shared | ||
status | ||
swagger | ||
user | ||
home.tmpl | ||
install.tmpl | ||
post-install.tmpl |