Drop alice/bob password prefill from the login page, add a regression test, and improve bulk-toolbar and disambiguation accessible names. Co-authored-by: Cursor <cursoragent@cursor.com>
698 B
698 B
| name | classification | success_metric | status | created | closed | pr |
|---|---|---|---|---|---|---|
| purge-quick-login-from-loginpage | fix | pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in CTA unchanged. | closed | 2026-05-26 | 2026-05-29 | pending |
Convoy: purge-quick-login-from-loginpage
Remove production Quick Login buttons that exposed test-user passwords in view-source HTML.
Scope
- Delete Quick Login section +
handleQuickLoginfrompages/login.js - Regression test: no quick-login copy or password literals in rendered output
Out of scope
- Rotating alice/bob DB hashes (operators rotate manually if needed)
TESTING_GUIDE.mddev account table (local QA reference only)