gitea

mirror of https://github.com/go-gitea/gitea.git synced 2025-03-04 22:58:40 +08:00

History

Set type="password" on all auth_token fields (#22175 )

Set `type="password"` on all `auth_token` fields

Seen when migrating from other hosting platforms.

1. Prevents exposing the token to screen capture/cameras/eyeballs.
2. Prevents the browser from saving the value in its autocomplete
dictionary, which often is not secure.

![exposed auth
token](https://user-images.githubusercontent.com/615684/208541005-e2c9c6b0-3c6c-4a56-95d9-357b987aa0c8.png)

Closes #22174

---------

Signed-off-by: Dan Church <amphetamachine@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>

2023-04-23 10:28:27 -04:00

codebase.tmpl

Add context cache as a request level cache (#22294 )

2023-02-15 21:37:34 +08:00

git.tmpl

Add context cache as a request level cache (#22294 )

2023-02-15 21:37:34 +08:00

gitbucket.tmpl

Add context cache as a request level cache (#22294 )

2023-02-15 21:37:34 +08:00

gitea.tmpl

Set type="password" on all auth_token fields (#22175 )