Change record status: 
Project: 
Introduced in branch: 
8.x-5.x
Introduced in version: 
8.x-5.0-rc3
Description: 

Summary

  • Disable password and the password_confirm element for new installations.
  • Disable password and password_confirm element on existing installations that are not using these elements.
  • Add warning message to all enabled password elements. (/admin/structure/webform/config/elements)
  • Add warning to all password elements that are stored in the database.
  • Remove password and password elements from webform_examples.module

Notes

  • Recommending people use the Webform Encrypt module.
  • The Webform Encrypt module is still in Alpha release, so we are not trying to determine when it is enabled or disabled for a password element.
  • Any element type that included the word 'password' is going to be excluded.
Impacts: 
Site builders, administrators, editors
Module developers