Backend user with empty password can be created
Actually it's possible to create a be user in the TYPO3 backend without setting an password.
Steps to reproduce¶
- Login as admin
- Switch to list module
- open PID 0
- create new be user
- only fill out username
- press save
Now the user is created and the password field is empty. I can reproduce it with Chrome and Safari.
Only tested in 8.5.0-dev Master.
Seems like, the problem is, that it's filled with a real value instead of displaying just a placeholder attribute. (The require check don't work)
- Prevent adding a backend user without password