Leaving 'confirm' field empty.

Hi guys,

A peculiar finding we found in the /idm/user 'change password' section.

If you just fill out the 'password' field and leave the 'confirm password' empty and then click Submit, the page refreshes with the 'confirm password' filled out with the value from the 'password' field! Clicking Submit again goes through fine..

Modifying the underlying xpress user form library to have these fields with secret=false (i.e. showing the values in clear text) doesn't show this behaviour. In fact, it's a general issue with any field having a 'confirm=....' property (validating for equal value against another field).

Any solution for this, or is this a bug to be reported to Sun?

Thanks.

Adi.

[748 byte] By [adimut] at [2007-11-26 9:31:31]