Tickets :: Comment on [#1883] Insecure: sensitive data in login screen

* Your Email Address
* Spam protection	Enter the letters below: . .. .. . __ .__ \|__\|\ /\|\ \|/ `[ __ \| \| \/ \| \\|\__.[_./
Comment	> In 'imp/templates/login/login.inc' there are several hidden form > fields that expose potentially sensitive network information - > including the private IP address of the mail server, TCP port number, > mail protocol, and whether TLS is on or off. There's no need for this > data to be sent to clients, other than for programmers' convenience. > > > > <snip> > > > > <input type="hidden" name="server" value="10.100.0.23" /> > > <input type="hidden" name="port" value="143" /> > > <input type="hidden" name="namespace" value="INBOX." /> > > <input type="hidden" name="maildomain" value="enc.edu" /> > > <input type="hidden" name="protocol" value="imap/notls" /> > > > > </snip>
Attachment
Watch this ticket