From 9eb10fb21aef52b5b5b19fe7d3152e6199562e70 Mon Sep 17 00:00:00 2001
From: Jeremy Ruston <jeremy@osmosoft.com>
Date: Fri, 16 Nov 2012 22:40:56 +0000
Subject: [PATCH] Clear password if decryption fails

---
 core/boot.js | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/core/boot.js b/core/boot.js
index 703424f11..687d10bb9 100644
--- a/core/boot.js
+++ b/core/boot.js
@@ -299,8 +299,8 @@ $tw.utils.PasswordPrompt.prototype.createPrompt = function(options) {
 	var self = this;
 	form.addEventListener("submit",function(event) {
 		// Collect the form data
-		var data = {};
-		for(var t=0; t<form.elements.length; t++) {
+		var data = {},t;
+		for(t=0; t<form.elements.length; t++) {
 			var e = form.elements[t];
 			if(e.name && e.value) {
 				data[e.name] = e.value;
@@ -315,6 +315,14 @@ $tw.utils.PasswordPrompt.prototype.createPrompt = function(options) {
 				promptInfo.form.parentNode.removeChild(promptInfo.form);
 				self.setWrapperDisplay();
 			}
+		} else {
+			// Clear the password if the callback returned false
+			for(t=0; t<form.elements.length; t++) {
+				var e = form.elements[t];
+				if(e.name === "password") {
+					form.elements[t].value = "";
+				}
+			}
 		}
 		event.preventDefault();
 		return false;