21.2.2 Identifying At Risk Password Items
Identify at risk password items by viewing the Security Profiles report and Password Items report.
At risk password items are those that either do not use a password item type that does not save session state, or store an unencrypted value in session state.
Parent topic: Understanding Developer Security Best Practices
21.2.2.1 Viewing the Security Profiles Report
To view the Security Profiles Report:
Parent topic: Identifying At Risk Password Items
21.2.2.2 Viewing the Password Items Report
To identify at risk password items:
Tip:
For pages that contain password items, set the page attribute Form Auto Complete to Off. Setting that attribute to Off prevents the web browser from attempting to auto complete items on the page.
Parent topic: Identifying At Risk Password Items