2 ms·
Is there a reason the password boxes are regular input fields and not password fields?
by jedimastert 6y ago
Is there a reason the password boxes are regular input fields and not password fields?
- jstrieb 6y agoThanks for your comment! When creating the encrypted URL, the password entry uses proper password fields, but the decryption prompt does not. I originally made the decryption password prompt use a JavaScript window.prompt because I didn't want to risk users' hints posing an XSS vulnerability. Unfortunately, that means entering the password in the prompt is not done with a proper password field, and is instead done in plaintext. Eventually, I hope to build out a better UI for decrypting links. Handling this is definitely on my list of planned improvements!