search

sakurity / securelogin

This version won't be maintained!
MIT License
1.22k stars 35 forks source link

Stop using browser modals #29

Open andrewda opened 7 years ago

andrewda commented 7 years ago

Currently, at the double check milestones (2, 4, 8, 16) the user is prompted to enter their password into a plain text JavaScript prompt. We need to find a better way to do this because we don't want the user entering their password in a plain, non obfuscated text field.

download13 commented 7 years ago

Using the autocomplete="off" attribute on an input field is supposed to prevent the browser from caching it's contents.

A check box could be used to make the password visible to the user if they want. This is the method used in Keepass for example.

andrewda commented 7 years ago

@download13 Yea, that sounds good.

homakov commented 7 years ago

Yes, in fact we can call this issue to get rid of using any browser modals as they are ugly.