BUG:Requirement of Proper Input Handling in Login/Register form #15
Comments
pand-coder
changed the title
Anjaliavv51
added
bug
|
I would like to work over it,please assign this task to me. |
Anjaliavv51
added a commit
that referenced
this issue
Oct 1, 2024
<!-- ISSUE & PR TITLE SHOULD BE SAME--> ## Description <!--Please include a brief description of the changes--> Added a small warning using html and css whenver user enter a password and cursor points on password input box validated the backend form validation used special character regex expression to prevent symbols that lead to client side injection attacks such as xss and other attacks. ## Related Issues <!--Cite any related issue(s) this pull request addresses. If none, simply state “None”--> None ## Type of PR <!-- Mention PR Type according to the issue in brackets below and check the below box --> - [X] (Security patch update feature with proper exception and error form validation) ## Screenshots / videos (if applicable) <!--Attach any relevant screenshots or videos demonstrating the changes-->  **Wrote this Exception handling to ensure proper validation**  ## Checklist <!-- [X] - put a cross/X inside [] to check the box --> - [X] I have gone through the [contributing guide](https://github.com/Anjaliavv51/Retro) - [X] I have updated my branch and synced it with project `main` branch before making this PR - [X] I have performed a self-review of my code - [X] I have tested the changes thoroughly before submitting this pull request. - [X] I have provided relevant issue numbers, screenshots, and videos after making the changes. - [X] I have commented my code, particularly in hard-to-understand areas. ## Additional context: Atfirst, Tried using the alert method but it was conflicting the google app authenticator then switched to this method of warning based change with change in the signup form validation code
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hello Project Admin,
Allowing special characters in password fields is essential for creating strong passwords. However, without proper input handling, special characters can introduce vulnerabilities such as XSS attacks. Malicious actors can exploit these vulnerabilities by injecting harmful scripts, leading to security breaches and data theft.
I would like to incorporate proper javascript Input Handling to prevent this type of client side injection or cross scripting attacks
The text was updated successfully, but these errors were encountered: