Public room: Password visible when entering it
if you open the room via a public link and enter the password it is visible. It is not hidden. Is it possible to change it?
Everything is possible, but what is the advantage of hiding it?
Since it is a password field, it should be shaded.
And the link to the room remains as long as the room exists.
If someone is looking over my shoulder he can use the private room.
If someone is looking over my shoulder he can use the private room.
If he can remember the 16 character random token + the 8 character random password.
I just want to say that I don't see this as an major security flaw, instead it's an usability improvement. See e.g. https://www.nngroup.com/articles/stop-password-masking/
The solution which would satisfy everyone would be a visibility toggle button. So if you have time it would be nice if you could create a pull request which adds this functionality. It should be only a few lines of code.