edbrowse-dev - development list for edbrowse
 help / color / mirror / Atom feed
From: Karl Dahlke <eklhad@comcast.net>
To: Edbrowse-dev@lists.the-brannons.com
Subject: [Edbrowse-dev]  masking of passwords
Date: Thu, 17 Dec 2015 17:13:57 -0500	[thread overview]
Message-ID: <20151117171357.eklhad@comcast.net> (raw)
In-Reply-To: <alpine.LRH.2.03.1512171306200.23004@carhart.net>

> But what if there was an invisible mode?

Well selfishly, I don't have a screen, so I don't care.
But seriously...

This is really a nontrivial effort.
Sure I can suppress echo at the tty,
but as soon as you hit return edbrowse prints the line with the password in position.
There it is on the screen.
Or if you ever reprint that line, there it is again.
You can't just replace the text with stars because that very text
is passed to our html tree and then to the server upon submit.
The only way around this is to keep the text in place but muck with displayLine()
so that if the tag is type password then everything between <> is replaced with stars.
That could be done but now it's a piece of work
at the input level, invisible mode, and the output level, displayLine.
The invisible mode would have to supress echo under both cooked tty and readline,
and then the same for the windows port,
the latter I definitely don't know how to do.

Karl Dahlke

  parent reply	other threads:[~2015-12-17 22:13 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-12-17 13:46 [Edbrowse-dev] Non-technical rant Chuck Hallenbeck
2015-12-17 14:52 ` Chris Brannon
2015-12-17 15:31   ` Karl Dahlke
2015-12-17 16:26     ` Chris Brannon
2015-12-17 20:56       ` [Edbrowse-dev] alt.ensign.crusher.die.die.die Kevin Carhart
2015-12-18 14:12         ` Adam Thompson
2015-12-19 23:40           ` [Edbrowse-dev] XHR Kevin Carhart
2015-12-21 23:29             ` Adam Thompson
2015-12-22  3:44               ` Kevin Carhart
2015-12-22  4:13                 ` Kevin Carhart
2015-12-22 15:28                 ` Karl Dahlke
2015-12-22 20:04                   ` Kevin Carhart
2015-12-23 18:52                     ` Adam Thompson
2015-12-17 21:00 ` [Edbrowse-dev] Non-technical rant Kevin Carhart
2015-12-17 21:38   ` [Edbrowse-dev] masking of passwords Kevin Carhart
2015-12-17 21:55     ` Chris Brannon
2015-12-18 13:58       ` Adam Thompson
2015-12-18 15:13         ` Karl Dahlke
2015-12-19 23:55           ` Kevin Carhart
2015-12-17 22:13     ` Karl Dahlke [this message]
2015-12-18  0:00       ` Kevin Carhart

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20151117171357.eklhad@comcast.net \
    --to=eklhad@comcast.net \
    --cc=Edbrowse-dev@lists.the-brannons.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).