What is the best way to handle this? The user needs to be able to edit the answers (they are masked out) but we don't want to be open to attack, of course.
Is the best choice to use some fake text to show in the box and then check that fake text on save? This option doesn't show the true number of characters for what they originally typed in. Is there a better method?
I checked this security.stackexchange question but the answer doesn't say what method is best for this scenario.