Actual behavior:

• Create entity with field of type Secret
• Create a form with input(u.password)
• Visit form
• Notice that “value=mysecretpassword”

Expected behavior:

• The password should not be stored plaintext by default (instead of having to use .digest())
• The password should not be sent back to the client ever

Submitted by Sverre Rabbelier on 26 February 2010 at 13:50

Workaround:

var p : Secret
form{ input(p) }
action("Save Password", action{ u.password := p.digest(); })

That is the workaround that we’re currently using, but the system should of course be safe by default ;).

That’s why I called it a workaround