Bug 63881 - IMPORTANT: Need possibility to Clear/Erase previously entered Form Data
Summary: IMPORTANT: Need possibility to Clear/Erase previously entered Form Data
Status: RESOLVED WORKSFORME
Alias: None
Product: konqueror
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: openSUSE Linux
: NOR wishlist
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-09-08 05:50 UTC by flstcboy
Modified: 2005-01-16 10:26 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description flstcboy 2003-09-08 05:50:54 UTC
Version:            (using KDE KDE 3.1.3)
Installed from:    SuSE RPMs
OS:          Linux

.THIS IS REALLY ABOUT SECURITY.


Entering a Login Name without pressing "Enter" and then typing Password in the same Login-Input Field gives a Security Problem, because it is not possible to clear/delete the Form Data. (i didn't found any Option yet)
"Clear Cache" or "Clear History" doesn't and shouldn't do that.

An extra Option is needed for that in the Konqueror-Settings Dialog, it should be easy to find and understand for the User. (i remember now, IE6 have got such an option to remove Form-Data and/or login/password Data)

The Option "Clear Form Data" could be inserted into the "Behavior-Section". There is already an "Auto-Completion" Option.

AN VERY USEFULL IDEA is:
Merging the
"Behavior-Section"  (including View Animation Once Selection) and
"History-Section"  (including the Clear History Option) and the
"Cache-Section"  into ONE Section "Behavior" with i.e. 3 Tabs would be really good, and more easy to "Clear/Delete/Erase" Form Data, History and Cache in ONE STET !!! 

Please Please Please, this is an important feature request (it should not be so much work), and not just a wishlist ;)

Thanks.
Comment 1 Stephan Kulow 2003-09-08 07:42:33 UTC
Subject: Re:  New: IMPORTANT: Need possibility to Clear/Erase previously entered Form Data

Am Monday 08 September 2003 05:50 schrieb manni@nef.wh.uni-dortmund.de:
> Entering a Login Name without pressing "Enter" and then typing Password in
> the same Login-Input Field gives a Security Problem, because it is not
> possible to clear/delete the Form Data. (i didn't found any Option yet)
> "Clear Cache" or "Clear History" doesn't and shouldn't do that.
I don't get it. What security problem? Explain in more details

Greteings, Stephan

Comment 2 Christian Loose 2003-09-08 17:44:38 UTC
(Please correct me if i'm wrong)

He wanted to login into a website. But he typed in his login name *and* 
password in the login edit field, because he forgot to press enter (tab?). 
Afterwards when he starts to type the login name he gets a history entry that 
also includes the password. 

So he wants a functionality that can erase the history for the form data. 
Don't we have something like this in KControl in KDE HEAD?

Christian
Comment 3 Maksim Orlovich 2003-09-08 17:57:26 UTC
Right click on a field, click clear history. I think this was in 3.1, even. 
 
Comment 4 flstcboy 2003-09-11 03:23:12 UTC
Christian pointed it out correctly, we/i need a functionality to clear 
form-data (like login fields or any other fields, even the google search field) 
(if people don't know exactly, just check out IE6 "Auto Completion" in the 
Settings Menu. (maybe found in the Content-Tab, but i forgot already :P) 
 
i found now the entry "Empty/Reset" (don't know exactly on english-KDE version) 
but that just clear the thing i just entered. the function DOES NOT "Erase" the 
content from the input fields persistently. the Data still exists after trying 
the function from the RMB (right mouse button) Menu. :/ 
 
thx 
Comment 5 flstcboy 2003-09-11 14:40:42 UTC
Subject: Re:  IMPORTANT: Need possibility to Clear/Erase previously entered Form Data

Hi Stephan,

the security problem is, that if i type in the login/account name, and then 
forget to press "Tab" or "Enter", then the cursor/focus is still inside the 
login textfield. then i type the password, and that entry is showing to 
everyone, who log into i.e. his web-mail account.
we need a possibility to clear all form data previously entered in any 
form-field.
(if you have a chance to look at IE6.. i mean something similar like the "Auto 
Completion" handling. there it is possible to delete form data, login or even 
passwords)

Greetings,
Manni


Am Montag, 8. September 2003 07:42 schrieben Sie:
> ------- You are receiving this mail because: -------
> You reported the bug, or are watching the reporter.
> You are a voter for the bug, or are watching someone who is.
>
> http://bugs.kde.org/show_bug.cgi?id=63881
>
>
>
>
> ------- Additional Comments From coolo@kde.org  2003-09-08 07:42 -------
> Subject: Re:  New: IMPORTANT: Need possibility to Clear/Erase previously
> entered Form Data
>
> Am Monday 08 September 2003 05:50 schrieb manni@nef.wh.uni-dortmund.de:
> > Entering a Login Name without pressing "Enter" and then typing Password
> > in the same Login-Input Field gives a Security Problem, because it is not
> > possible to clear/delete the Form Data. (i didn't found any Option yet)
> > "Clear Cache" or "Clear History" doesn't and shouldn't do that.
>
> I don't get it. What security problem? Explain in more details
>
> Greteings, Stephan

Comment 6 flstcboy 2005-01-16 10:26:55 UTC
worked out nicely