This issue is triggered when you have clear data in a login action. An example that would you make directly understand could be the following:
This is considered an issue because the email and the password are publicly available to everyone on the page through the App JSON object.
Solution
You should always rely on dynamic data entered by the user for login actions.
A secured example would be the following:
