Hide the cursor when the password prompt is showing (jesseduffield#4878)

stefanhaller · web-flow · commit cb2b5c37387b · 2025-09-20T11:14:05.000+02:00
The cursor is a bit of a security concern, because it reveals the length (and typing pattern) of the password. Resolves jesseduffield#4877.
diff --git a/pkg/gui/context.go b/pkg/gui/context.go
@@ -196,7 +196,7 @@ func (self *ContextMgr) Activate(c types.Context, opts types.OnFocusOpts) {
 
 	v.Visible = true
 
-	self.gui.c.GocuiGui().Cursor = v.Editable
+	self.gui.c.GocuiGui().Cursor = v.Editable && v.Mask == 0
 
 	c.HandleFocus(opts)
 }

Original file line number	Diff line number	Diff line change
`@@ -196,7 +196,7 @@ func (self *ContextMgr) Activate(c types.Context, opts types.OnFocusOpts) {`
`196`	`196`
`197`	`197`	`v.Visible = true`
`198`	`198`
`199`		`- self.gui.c.GocuiGui().Cursor = v.Editable`
	`199`	`+ self.gui.c.GocuiGui().Cursor = v.Editable && v.Mask == 0`
`200`	`200`
`201`	`201`	`c.HandleFocus(opts)`
`202`	`202`	`}`