Re: login security issue
Re: login security issue
- Subject: Re: login security issue
- From: Miguel Arroz <email@hidden>
- Date: Thu, 13 Jul 2006 01:01:04 +0100
Hi!
Nice tip! But must be used with care... depending on the app (and
on the target) I might want to let people use autocomplete! :) Trade-
offs, trade-offs...
Yours
Miguel Arroz
On 2006/07/13, at 00:55, Chuck Hill wrote:
Now there is a handy piece of information that I had overlooked.
Thanks!
Chuck
On Jul 12, 2006, at 4:33 PM, Cliff Tuel wrote:
If you set the headers to disallow caching it should prevent what
Thomas is describing. However, if the user allowed the browser to
save their password, there is nothing you can do.
Yes there is: add autocomplete="OFF" to your <form> tag.
-- Cliff Tuel . http://apple.com/services/technicalsupport
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40global-village.net
This email sent to email@hidden
--
Coming sometime... - an introduction to web applications using
WebObjects and Xcode http://www.global-village.net/wointro
Practical WebObjects - for developers who want to increase their
overall knowledge of WebObjects or who are trying to solve specific
problems. http://www.global-village.net/products/
practical_webobjects
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40guiamac.com
This email sent to email@hidden
"We have no sympathy for the lost souls
We've chosen the path of disgrace
We give this life to our children
And teach them to hate this place" -- Apocalyptica, Life Burns!
Miguel Arroz
http://www.ipragma.com
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden