Menu

#127 Clear password displayed in Android App settings

5.0
open
android (7)
1
2014-09-09
2014-09-09
Anonymous
No

In the Android application, at first time setup, we are invited to insert our server information in the settings (I suppose SettingActivity.java is used there). Since a recent release of Subsonic, the password field is now clear and will always display its content when being edited. This is on my opinion a big security issue, especially for users that had link their Active Directory (or LDAP) to subsonic. This simply expose our credentials to anyone.

A fix can be quickly applied using the solution proposed by this Stack overflow's thread: http://stackoverflow.com/questions/6164430/how-to-use-edittextpreference-as-a-masked-password-text-field.

Hope this will be fixed soon.
Thanks

Discussion

Anonymous
Anonymous

Add attachments
Cancel