passman icon indicating copy to clipboard operation
passman copied to clipboard

Sans serif font makes passwords confusable

Open IBBoard opened this issue 5 years ago • 1 comments

Bug report

Steps to reproduce

  1. Create a password with "I" (capital i) and "l" (lower case L) and save
  2. View password entry
  3. Click "Show password"

Expected behaviour

Password can be read back without confusing letters

Actual behaviour

It's impossible to differentiate I from l.

(Also applies to O/0 to a lesser degree)

Configuration

Operating system: Android Pie and openSUSE Tumbleweed

Browser: Firefox 65.0.1 (mobile and desktop)

Extensions that might cause interference: None

Passman version: 2.2.1

cloud server: Nextcloud

cloud version: 15.0.4


Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

IBBoard avatar Mar 03 '19 16:03 IBBoard

I've not managed to edit, build and test this myself yet, but some DOM Inspector CSS hacking and a bit of code walking suggests that it might be a quick fix that just needs a class="password" adding to the credential template and adding a font-family: monospace rule (or more specific) to the CSS files.

(Although it might be helpful to fix other locations as well, like creating/editing)

Note: The confusability is important for times when you're trying to type in to other devices. I was trying to log in on a Nintendo Switch, looking at the web UI on my phone.

IBBoard avatar Mar 03 '19 16:03 IBBoard