Name: krT82822 Date: 04/20/99


Type in a password which contains a special character into a
JPasswordField then double-click in the JPasswordField and all
characters (asterisks) up to the special character will be
highlighted. This can be a security problem since it provides
information (where special characters are located) on the
password typed.

You Type: ab_cde
You See: ******
double-click here: ^
this is highlighted: ^^
double-click here: ^
this is highlighted: ^^^

Tested on the following JDK versions...

java -version:
java version "1.2.1"
Solaris VM (build Solaris_JDK_1.2.1_02, native threads, sunwjit)
java -fullversion:
java full version "Solaris_JDK_1.2.1_02"

java -version:
java version "1.2"
Classic VM (build JDK-1.2-V, green threads, sunwjit)
java -fullversion:
java full version "JDK-1.2-V
(Review ID: 57240)
======================================================================