Comments (5)
This may be related to oc-1949:
You have to hit enter after you type in a password and then it should say 'Password protected' inside the textbox. I'm not sure if this is the best user experience.
Can you confirm this?
from core.
Thanks alot @LukasReschke this was indeed the issue.
I think this is totally none discoverable.
Submitting the password after every key stroke seems like a security issue, as an attacker could see how long it is by counting requests.
I would suggest submit it on leaving the field or closing the menu.
Thanks for you quick help, would have never discovered that.
from core.
I would suggest submit it on leaving the field or closing the menu.
This sounds resonable.
@MTGap what do you think?
from core.
Yes, submit on blur is good, and there needs to be some feedback like on the email field in the personal settings. (Or better yet, like the account settings fields here on Github with just a checkmark.)
from core.
I changed it to set the new password as soon as the password filed loses focus.
from core.
Related Issues (20)
- New WEB app broking share links. HOT 4
- [QA] received readonly federated shares cannot be renamed
- [QA] Previews fail for SVG images with gradients HOT 2
- OwnCloud freezes my system during first account creation HOT 2
- Discovery url returns url with incorrect port HOT 1
- Invalid signature EXPKEYSIG 4ABE1AC7557BEFF9 HOT 4
- License "AGPL-1.0" is a deprecated SPDX license identifier HOT 1
- 404 Error when trying to load a preview of the photo (JPG) HOT 4
- Possible wrong affected version on CVE-2024-26320 advisory HOT 2
- New Spanish variant es_ES has been created with very few translations HOT 4
- phpstan 1.11.0 is reporting Undefined offset
- sonar-analysis step is failing in drone CI HOT 2
- Federated share with known user leads to wrong message HOT 3
- owncloud 10.14.0 is broken when files_external app is removed HOT 4
- Zip files extracted to external storage are not showing up in OwnCloud Front End. HOT 5
- [QA] wrong logic when 'allow_user_mounting' is (initially) undefined
- [QA] misleading message sent to client, when token_auth_enforced is true HOT 9
- Stop using the PNG format for HEIC thumbnails
- Extend telemetry.enabled description in config.sample.php -> Only enterprise users affected HOT 2
- Reset password URL's protocol is "HTTP" while the site's URL has protocol "HTTPS" HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from core.