You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the current implementation the password field value is replaced just before submitting the form,
causing Firefox to remember the password hash string instead of the user input.
This leads to a login failure when the user attempts use the remembered password next time.
Perhaps a hidden form field can be used to pass the hash to the server.
The password field itself can be made unnamed or disabled to prevent the browser from sending raw passwords to the server.
The text was updated successfully, but these errors were encountered:
In the current implementation the password field value is replaced just before submitting the form,
causing Firefox to remember the password hash string instead of the user input.
This leads to a login failure when the user attempts use the remembered password next time.
The problematic script part:
Perhaps a hidden form field can be used to pass the hash to the server.
The password field itself can be made unnamed or disabled to prevent the browser from sending raw passwords to the server.
The text was updated successfully, but these errors were encountered: