HTML button to revbeal password input field - linux

Question

I have a table with 7 columns. One of them contains passwords (pw).
I dont want to show the passwords on my website: I would like to have some kind of "click to expand" in the table to show it.
Here is a part of the script that contains the table:
...
push #certlist, {
state => $cert[0],
'expire' => $date,
'subject' => $cert[5],
'cn' => $cn,
'ip' => $ccd_ips->{$cn},
'dl' => '',
're' => '',
'pw' => $password->{$cn}
};
...
return $q->table(
{ 'class' => 'certs' },
$q->Tr(
[
$q->th(
[ 'Status', 'Common Name', 'D', 'Password',
'Date', 'Subject', 'IP-Adress', 'R'
]
) . "\n",
map {
$q->td( { 'class' => $_->{'state'} }, $states{ $_->{'state'} } ) .
$q->td( [ #$_{qw(cn dl pw expire subject ip re)} ] ) . "\n"
} #certlist
]
)
) . "\n";
...

Answer 1

You should only add a class, say password-container to elements that contain passwords. Set the initial content to masked.
That is:
push #certlist, {
state => $cert[0],
'expire' => $date,
'subject' => $cert[5],
'cn' => $cn,
'ip' => $ccd_ips->{$cn},
'dl' => '',
're' => '',
'pw' => '*' x 8,
};
Add a bit of JavaScript to the page to add an onclick handler for all elements with the password-container class which handles the toggling.
return $q->table(
{ 'class' => 'certs' },
$q->Tr(
[
$q->th(
[ 'Status', 'Common Name', 'D', 'Password',
'Date', 'Subject', 'IP-Adress', 'R'
]
) . "\n",
map {
$q->td( { 'class' => $_->{'state'} }, $states{ $_->{'state'} } ) .
$q->td( [ #$_{qw(cn dl)} ]) .
$q->td( { 'class' => 'password_container' }, $_->{pw} ) .
$q->td( [ #$_{qw(expire subject ip re)} ] ) . "\n"
} #certlist
]
)
) . "\n";
or some similar garbage.
This, once again, shows the value of not generating HTML using CGI.pm. Instead use templates. That's just advice for the future, I am assuming you can't fix the existing codebase.
BTW, here is a relevant bit from CGI.pm documentation:
All HTML generation functions within CGI.pm are no longer being maintained. Any issues, bugs, or patches will be rejected unless they relate to fundamentally broken page rendering.
The rationale for this is that the HTML generation functions of CGI.pm are an obfuscation at best and a maintenance nightmare at worst. You should be using a template engine for better separation of concerns. See CGI::Alternatives for an example of using CGI.pm with the Template::Toolkit module.
These functions, and perldoc for them, are considered deprecated, they are no longer being maintained and no fixes or features for them will be accepted. They will, however, continue to exist in CGI.pm without any deprecation warnings ("soft" deprecation) so you can continue to use them if you really want to. All documentation for these functions has been moved to CGI::HTML::Functions.