Remove the max_length limitations on the login input fields as they do not match the actual backend requirements.

Bug #959179 reported by Alvaro Lopez
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Fix Released
Wishlist
Gabriel Hurley

Bug Description

In the login screen, the login and password fields are limited to a maximum length of 20. However, either the login and password fields are not limited in OS.

Changed in horizon:
importance: Undecided → Wishlist
status: New → Confirmed
summary: - max_length in login username and password should be higher
+ Make username/password lengths configurable
tags: added: essex-rc-potential
Changed in horizon:
assignee: nobody → Tihomir Trifonov (ttrifonov)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to horizon (master)

Fix proposed to branch: master
Review: https://review.openstack.org/5644

Changed in horizon:
status: Confirmed → In Progress
summary: - Make username/password lengths configurable
+ Remove the max_length limitations on the login input fields as they do
+ not match the actual backend requirements.
Devin Carlen (devcamcar)
Changed in horizon:
milestone: none → essex-rc2
tags: removed: essex-rc-potential
Changed in horizon:
assignee: Tihomir Trifonov (ttrifonov) → Tres Henry (tres)
Changed in horizon:
assignee: Tres Henry (tres) → Gabriel Hurley (gabriel-hurley)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (master)

Reviewed: https://review.openstack.org/5644
Committed: http://github.com/openstack/horizon/commit/a7db3bc3a365ad3cb35245b2e4c721dca43c9cbf
Submitter: Jenkins
Branch: master

commit a7db3bc3a365ad3cb35245b2e4c721dca43c9cbf
Author: Tihomir Trifonov <email address hidden>
Date: Wed Mar 21 20:47:40 2012 +0200

    Removed max_length from username/password fields in login page

    Fixes bug 959179

    The field validation on the login page may lead
    to security issues - it should accept any input,
    without validation. Not to tell hackers what range to probe..
    The validation should be only on create/update User page.

    Updates the translation files for the new strings.

    Change-Id: Ib3bc72a024fe3e39e06bf948c6aaca8f2b1e60ee

Changed in horizon:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in horizon:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in horizon:
milestone: essex-rc2 → 2012.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.