Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Users] Editable readonly inputs #204268

Open
nickofthyme opened this issue Dec 13, 2024 · 1 comment · May be fixed by #204269
Open

[Users] Editable readonly inputs #204268

nickofthyme opened this issue Dec 13, 2024 · 1 comment · May be fixed by #204269
Assignees
@nickofthyme
Labels
bug Fixes for quality problems that affect the customer experience Feature:Users Security Solution Users feature Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! triage_needed

Comments

@nickofthyme
Copy link
Contributor

nickofthyme commented Dec 13, 2024 •
edited
Loading

Kibana version:

8.17

Describe the bug:

When using LastPass or similar password management tools. Kibana does not prevent these tools from editing disabled input values. This results in edited disabled value being saved.

This applies to any input that has a commonly used name attribute (i.e. 'username' or 'password') and is conditionally disabled.

Image

Expected behavior:

Any disabled input is not editable from extensions.

Any additional context:

May result in an error unbeknownst to the user.

Image

Related: elastic/eui#8238
@nickofthyme nickofthyme added bug Fixes for quality problems that affect the customer experience Feature:Kibana Management Feature label for Data Views, Advanced Setting, Saved Object management pages labels Dec 13, 2024
@botelastic botelastic bot added the needs-team Issues missing a team label label Dec 13, 2024
@nickofthyme nickofthyme self-assigned this Dec 13, 2024
@nickofthyme nickofthyme added Feature:Users Security Solution Users feature and removed Feature:Kibana Management Feature label for Data Views, Advanced Setting, Saved Object management pages needs-team Issues missing a team label labels Dec 13, 2024
@botelastic botelastic bot added the needs-team Issues missing a team label label Dec 13, 2024
@nickofthyme nickofthyme linked a pull request Dec 13, 2024 that will close this issue
Open
1 task
@dmlemeshko dmlemeshko added the Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! label Dec 23, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security (Team:Security)

@botelastic botelastic bot removed the needs-team Issues missing a team label label Dec 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@nickofthyme nickofthyme

Labels
bug Fixes for quality problems that affect the customer experience Feature:Users Security Solution Users feature Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! triage_needed
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[User] Prevent disabled input change by password manager nickofthyme/kibana
3 participants
@dmlemeshko @elasticmachine @nickofthyme