mysqlconfigurer icon indicating copy to clipboard operation
mysqlconfigurer copied to clipboard

MySQL Root User password is stored in web cache

Open Ragowit opened this issue 1 year ago • 1 comments

I noticed the Releem Agent was not running for some reason, and followed the Automatic Installation tool to reinstall it again. When focus was on the "MySQL Root User password" input box so did I notice that it had a suggestion for my password from when I used it previously.

I believe this can be a security issue.

I think by adding autocomplete="off" on the input-field will solve the issue.

Ragowit avatar Jul 04 '24 19:07 Ragowit

@Ragowit Thank you, great suggestion. We'll try to fix it.

Re unavailable Releem Agent please send me to [email protected] Releem Agent logs to find the root cause: journalctl -u releem-agent

drupaladmin avatar Jul 04 '24 19:07 drupaladmin

@Ragowit Fixed that in the latest release

drupaladmin avatar Dec 15 '24 08:12 drupaladmin