[midPoint] Feature : Turn Off Form Autocompletion

[Radovan Semancik]

Hello,

First of all, I do not think this would justify invoking "security 
reasons" to avoid purchasing a subscription.

Strictly speaking, this is not a midPoint problem. It is browser that 
autocompletes the data. If browser misdetects the password field, then 
browser should be fixed. Not midPoint.

But despite that we have been addressing autocomplete problems in the 
past. However, this is very tricky. We have spent a lot of time on this. 
It is very hard to find combination that would work for all the browsers 
and versions in all the situations. If there is a problem with 
autocomplete we will need to explore specific situation, specific 
browser, maybe even browser settings. That is something that we would 
only do for midPoint subscriber.

But as always, if someone has an universal tested solution we are 
perfectly open for contribution.

I'm sorry if this sounds harsh. But we have spend enormous amount of 
time and effort on items that are "for all" and even after all this 
years that effort was not repaid. Maybe you could do something that is 
"for all" and either make a contribution or purchase a subscription? It 
seems to me quite unlikely that a multinational company with billions in 
revenue won't be able to afford midPoint subscription.

-- 
Radovan Semancik
Software Architect
evolveum.com



On 08/20/2018 11:52 AM, Sylvaire kevin TIPA wrote:
>
> Hello MP Team,
>
> For security reason, can you disabled Autocompletion in password input 
> field pls ? I kown that for feature request we need subscription but 
> the security item is  for all J
>
> https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion 
>
>
> I think it’s only here : 
> https://github.com/Evolveum/midpoint/blob/master/gui/admin-gui/src/main/java/com/evolveum/midpoint/web/page/login/PageLogin.html 
>
>
> Br, thx.
>
> Cordialement,
>
> cid:8e2f30c3-f5eb-4f4e-aefb-9d083f8a3b45
>
> *Sylvaire-Kevin TIPA*//
>
> /Thales Services / OIC / DevOps Automatisation Infrastructures/
>
> …………………………………………………………………………………………
>
> THALES SERVICES SAS
> 44 Quai Charles de Gaulle
> CS 20100
> 69463 Lyon Cedex 06
>
> …………………………………………………………………………………………
>
> www.thalesgroup.com <http://www.thalesgroup.com/>
>
> This message contains confidential information and is intended only 
> for the individual(s) addressed in the message. If you are not the 
> named addressee, you should not disseminate, distribute, or copy this 
> e-mail. If you are not the intended recipient, you are notified that 
> disclosing, distributing, or copying this e-mail is strictly prohibited.
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180820/989c35bd/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6112 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20180820/989c35bd/attachment.png>