[Borges-users] HTMLRenderer extension

[Eric Hodel]

Kaspar Schiess (eule at space.ch) wrote:

> r.password_input_on(:password, self)

There's a problem with this one:

> +  ##
> +  # Creates a password input containing +value+. It is however
> +  # not a good idea to output the current password to html, since

The way #password_input_on is implemented, it may expose the password to
the user.  Should instead value be set to '********' rather than
obj.send(sym)?

-- 
Eric Hodel - drbrain at segment7.net - http://segment7.net
All messages signed with fingerprint:
FEC2 57F1 D465 EB15 5D6E  7C11 332A 551C 796C 9F04

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://rubyforge.org/pipermail/borges-users/attachments/20040412/67c208ea/attachment.bin