csvbase
csvbase copied to clipboard
Signed out blank table form should blank sensitive fields
Description
The blank table form retains user credentials and even puts them in the url, where they are in danger of being logged
Steps to reproduce
- Be signed out
- Visit https://csvbase.com/new-table/blank
- Enter user credentials
- Then add a new column to the form
Expected result
Sensitive fields should be blanked
Actual result
They are retained (and so put in the URL)
Additional details
This feels like it needs a post-redirect-get job for signed out users. Signed in users can keep the current flow which saves a request cycle.
https://www.reddit.com/r/programming/comments/15y184f/i_didnt_write_any_javascript_and_other_shortcuts/jxbrqng/?context=3