Skip to content

The Virtual-Keyboard shows passwords unmasked #1794

Open
@ruben-5

Description

@ruben-5

Hello everyone,

There is a security issue with the password input field in the login dialog. When a user types their password, it's correctly hidden in the input field, but the characters appear in plain text above the on-screen keyboard. This defeats the purpose of a masked password input.

For enhanced security, we need to prevent the on-screen keyboard from displaying the typed password above the keyboard area. Ideally, the input field should remain of type "password," and any predictive text or keyboard preview should be disabled when typing in this field.

Here's a screenshot of the issue:
The password "password" is shown above the virtual keyboard even though the input box masks it.

Image

Image

Environment:

FUXA version: Version 1.2.5-2292

OS/device: Raspberry Pi 4 Model B Rev 1.5

Browser: Google Chrome

Let me know if there's a way to suppress this, or if it needs to be addressed in a future update.

Thanks for your great work on this project!

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions