From dbf3b00576d2de1d88ff321c21afbd109d20c01a Mon Sep 17 00:00:00 2001 From: David Coutadeur Date: Mon, 7 Feb 2022 16:04:38 +0100 Subject: [PATCH] fix Chrome warns about compromised data when using form replay (#2694) --- lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm index 22706189d..79eb84fc0 100644 --- a/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm +++ b/lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Main/Run.pm @@ -898,7 +898,8 @@ sub postJavascript { my $filler; foreach my $name ( keys %$data ) { use bytes; - my $value = "x" x bytes::length( $data->{$name} ); + my @characterSet = ( '0' ..'9', 'A' .. 'Z', 'a' .. 'z' ); + my $value = join '' => map $characterSet[ rand @characterSet ], 1 .. bytes::length( $data->{$name} ); $filler .= "form.find('input[name=\"$name\"], select[name=\"$name\"], textarea[name=\"$name\"]').val('$value')\n"; }