From 2b60f8ca2a2ec385313ebc4e1b3e72edbe34ba01 Mon Sep 17 00:00:00 2001
From: Unrud <unrud@outlook.com>
Date: Sun, 3 May 2020 21:00:48 +0200
Subject: [PATCH] Don't save password in session storage

---
 radicale/web/internal_data/fn.js | 22 +---------------------
 1 file changed, 1 insertion(+), 21 deletions(-)

diff --git a/radicale/web/internal_data/fn.js b/radicale/web/internal_data/fn.js
index cd40e8a..9305596 100644
--- a/radicale/web/internal_data/fn.js
+++ b/radicale/web/internal_data/fn.js
@@ -524,10 +524,6 @@ function LoginScene() {
                         // show collections
                         let saved_user = user;
                         user = "";
-                        if (typeof(sessionStorage) !== "undefined") {
-                            sessionStorage.setItem("radicale_user", saved_user);
-                            sessionStorage.setItem("radicale_password", password);
-                        }
                         let collections_scene = new CollectionsScene(
                             saved_user, password, collection, function(error1) {
                                 error = error1;
@@ -570,24 +566,8 @@ function LoginScene() {
         fill_form();
         form.onsubmit = onlogin;
         html_scene.classList.remove("hidden");
-        let direct_login = false;
-        if (typeof(sessionStorage) !== "undefined") {
-            // Try direct login when scene is shown for the first time and credentials are stored
-            if (scene_index === null && sessionStorage.getItem("radicale_user")) {
-                user_form.value = sessionStorage.getItem("radicale_user");
-                password_form.value = sessionStorage.getItem("radicale_password");
-                direct_login = true;
-            } else {
-                sessionStorage.setItem("radicale_user", "");
-                sessionStorage.setItem("radicale_password", "");
-            }
-        }
         scene_index = scene_stack.length - 1;
-        if (direct_login) {
-            onlogin();
-        } else {
-            user_form.focus();
-        }
+        user_form.focus();
     };
     this.hide = function() {
         read_form();