deckhearth/.convoys/purge-quick-login-from-loginpage.md
Randall Stillwell f666a885b9 chore(convoys): mark shipped convoys and refresh ship-readiness
Close stale convoy frontmatter for merged scanner, lint, and hygiene work;
record P1 #11.5 and queued follow-ups as RESOLVED with PR references.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-02 08:48:42 -05:00

821 B

name classification success_metric status created closed pr
purge-quick-login-from-loginpage fix pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in CTA unchanged. shipped 2026-05-26 2026-05-29 56

Convoy: purge-quick-login-from-loginpage

As-shipped: PR #56 (e0218e4, 2026-05-29). Quick Login removed from pages/login.js (bundled with scanner a11y polish).

Remove production Quick Login buttons that exposed test-user passwords in view-source HTML.

Scope

  • Delete Quick Login section + handleQuickLogin from pages/login.js
  • Regression test: no quick-login copy or password literals in rendered output

Out of scope

  • Rotating alice/bob DB hashes (operators rotate manually if needed)
  • TESTING_GUIDE.md dev account table (local QA reference only)