form security stuff

Dirk Mueller mueller at kde.org
Fri Apr 18 17:22:46 CEST 2003


Hi, 

while merging in your latest changes I still noticed the addition of these 
methods to DocumentImpl:

    void passwordFieldAdded();
    void passwordFieldRemoved();
    bool hasPasswordField() const;

    void secureFormAdded();
    void secureFormRemoved();
    bool hasSecureForm() const;


What are they used for? Besides verbose code that maintains this state, 
there is no place that actually queries it and uses it. 

How do you use the fact that it is a secure form or has a password field?

If this is just about not storing user entered input of secure or password 
fields in session history, then this can be nicely encapsulated in 
HTMLGenericFormElementImpl.. so I wonder that there *must* be a different 
reason. However, I cannot imagine one. 

Could you please enlighten me..? Thanks :)


-- 
Dirk


More information about the Khtml-devel mailing list