Readable password in settings #349
Labels
Bug
Something isn't working
Comments
sk-juroot
added
Bug
sk-juroot
added a commit
to sk-juroot/WhereYouGo
that referenced
this issue
Jan 5, 2022
used AndroidX settings framework ignores `whereyougo_preferences_credentials.xml` value for hiding text as password, InputType is defined on password EditText binding commit also fixes check for empty username and password on checklogin functionality (previously left as TODO), missing username or password should disable Check login data functionality fixes cgeo#349
|
Confirmed |
Lineflyer
removed
the
Unverified
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe your problem!
User password is revealed as plaintext to anyone who opens WhereYouGo application settings.
How to reproduce?
Actual result after these steps?
Plaintext password shown
Expected result after these steps?
Password field showing only masking characters ( • or * )
Reproducible
Yes
WhereYouGo Version
2022.01.02
System information
No response
Additional Information
Passwords sould not be readable as plaintext anywhere in the GUI (as a basic security measure), when Check login data functionality works, there is no need to have user password visible. This may be security issue for WYG players with extended access to another Groundspeak services.
The text was updated successfully, but these errors were encountered: