hide password for testing with your actual password in front of colle…

…agues
qpioneer · Apr 21, 2019 · 2b2e267 · 2b2e267
1 parent 4bafc19
commit 2b2e267
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/...ns/secure-passwords/src/main/java/org/owasp/webgoat/plugin/SecurePasswordsAssignment.java b/...ns/secure-passwords/src/main/java/org/owasp/webgoat/plugin/SecurePasswordsAssignment.java
@@ -38,7 +38,7 @@ public AttackResult completed(@RequestParam String password) {
         DecimalFormat df = new DecimalFormat("0", DecimalFormatSymbols.getInstance(Locale.ENGLISH));
         df.setMaximumFractionDigits(340);
 
-        output.append("<b>Your Password: </b>" + password + "</br>");
+        output.append("<b>Your Password: *******</b></br>");
         output.append("<b>Length: </b>" + password.length()+ "</br>");
         output.append("<b>Estimated guesses needed to crack your password: </b>" + df.format(strength.getGuesses())+ "</br>");
         output.append("<div style=\"float: left;padding-right: 10px;\"><b>Score: </b>" + strength.getScore()+ "/4 </div>");

diff --git a/webgoat-lessons/secure-passwords/src/main/resources/html/SecurePasswords.html b/webgoat-lessons/secure-passwords/src/main/resources/html/SecurePasswords.html
@@ -26,7 +26,7 @@
             <table>
                 <tr>
                     <td><label>Password</label></td>
-                    <td><input name="password" value="" type="TEXT" placeholder="Enter a secure password"/></td>
+                    <td><input name="password" value="" type="password" placeholder="Enter a secure password"/></td>
                 </tr>
                 <tr>
                     <td><button type="SUBMIT">Submit</button></td>