maverick/docbrown
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Hide secret code from input history (#9032)

Browse source 
Currently, the secret code will show up in the input history. That, I think, means that anyone that can open that page in a shared browser instance could join the org.
This commit is contained in:
Ben Lesh 2020-06-30 13:26:18 -05:00 • committed by GitHub
parent ec71478762
commit e364a6ad19
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/views/users/_org_non_member.html.erb
View file

@ -6,7 +6,7 @@
<div class="crayons-field mb-6">
<%= label_tag :org_secret, "Secret code", class: "crayons-field__label" %>
<p class="crayons-field__description">Provided to you by an org admin</p>
<%= text_field_tag :org_secret, nil, placeholder: "...", class: "crayons-textfield" %>
<%= text_field_tag :org_secret, nil, placeholder: "...", class: "crayons-textfield", autocomplete: "off" %>
</div>
<button class="crayons-btn" type="submit">Join Organization</button>