master: masking input with empty rune to not increment the cursor pos…

…ition to prevent the input length being revealed
manifoldco · Dec 31, 2019 · ad237b6 · ad237b6
1 parent 8fa33db
commit ad237b6
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/cursor.go b/cursor.go
@@ -121,6 +121,10 @@ func (c *Cursor) Format() string {
 
 // FormatMask replaces all input runes with the mask rune.
 func (c *Cursor) FormatMask(mask rune) string {
+	if mask == ' ' {
+		return format([]rune{}, c)
+	}
+
 	r := make([]rune, len(c.input))
 	for i := range r {
 		r[i] = mask