From d781bbfcbb6bfe3d041975cb729f50438c9f2c51 Mon Sep 17 00:00:00 2001
From: catborise <catborise@gmail.com>
Date: Mon, 19 Oct 2026 21:22:14 +0300
Subject: [PATCH] fix(virtsecrets): the value field of the secret edit dialog
 is named by its label

The last finding of the real-host accessibility scan: the label of each
secret's value field did not point at it. It now does, with an id per
secret.
---
 virtsecrets/templates/secrets.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/virtsecrets/templates/secrets.html b/virtsecrets/templates/secrets.html
index d0ffc3ab..caf36136 100644
--- a/virtsecrets/templates/secrets.html
+++ b/virtsecrets/templates/secrets.html
@@ -93,10 +93,10 @@
                                                 <form method="post" role="form" aria-label="Edit secret form">{% csrf_token %}
                                                     <div class="modal-body">
                                                         <div class="row">
-                                                            <label class="col-sm-3 col-form-label">{% trans "Value" %}</label>
+                                                            <label class="col-sm-3 col-form-label" for="secret_value_{{ secret.uuid }}">{% trans "Value" %}</label>
                                                             <input type="hidden" name="uuid" value="{{ secret.uuid }}">
                                                             <div class="col-sm-6">
-                                                                <input type="text" name="value" class="form-control" value="{{ secret.value }}" required pattern="[A-Za-z0-9+\/]*={0,2}">
+                                                                <input type="text" id="secret_value_{{ secret.uuid }}" name="value" class="form-control" value="{{ secret.value }}" required pattern="[A-Za-z0-9+\/]*={0,2}">
                                                             </div>
                                                         </div>
                                                 </div> <!-- /.modal-content -->