From 565ed654fd6aa3e6c8b5f702458a7d09d4135b86 Mon Sep 17 00:00:00 2001
From: Timothy Cyrus <tcyrus@users.noreply.github.com>
Date: Mon, 12 Jun 2017 10:07:22 -0400
Subject: [PATCH] Use password field type for passwords

The Change Password and Import Password fields should not be plain text fields.
---
 .../templates/frontend/directives/account-menu.html.haml    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/assets/templates/frontend/directives/account-menu.html.haml b/app/assets/templates/frontend/directives/account-menu.html.haml
index ce156d5a2..3b11e3609 100644
--- a/app/assets/templates/frontend/directives/account-menu.html.haml
+++ b/app/assets/templates/frontend/directives/account-menu.html.haml
@@ -76,8 +76,8 @@
           %a{"ng-click" => "newPasswordData.changePassword = false; newPasswordData.showForm = false"} Cancel
           %div.mt-10{"ng-if" => "newPasswordData.showForm"}
             %form
-              %input.form-control{"type" => "text", "ng-model" => "newPasswordData.newPassword", "placeholder" => "Enter new password"}
-              %input.form-control{"type" => "text", "ng-model" => "newPasswordData.newPasswordConfirmation", "placeholder" => "Confirm new password"}
+              %input.form-control{:type => 'password', "ng-model" => "newPasswordData.newPassword", "placeholder" => "Enter new password"}
+              %input.form-control{:type => 'password', "ng-model" => "newPasswordData.newPasswordConfirmation", "placeholder" => "Confirm new password"}
               %button.ui-button.block{"ng-click" => "submitPasswordChange()"} Submit
         %p.italic.mt-10{"ng-if" => "newPasswordData.status"} {{newPasswordData.status}}
 
@@ -107,7 +107,7 @@
 
       %div{"ng-if" => "importData.requestPassword"}
         Enter the account password associated with the import file.
-        %input{"type" => "text", "ng-model" => "importData.password"}
+        %input{:type => 'password', "ng-model" => "importData.password"}
         %button{"ng-click" => "submitImportPassword()"} Decrypt & Import
 
       %p.mt-5{"ng-if" => "user"} Notes are downloaded in the Standard File format, which allows you to re-import back into this app easily. To download as plain text files, choose "Decrypted".