From 8775b7dcf7866fc3ae99bebe750ef3df0fe2f0c8 Mon Sep 17 00:00:00 2001 From: Ylian Saint-Hilaire Date: Sun, 24 Mar 2024 11:03:33 -0700 Subject: [PATCH] Set login autocomplete to off when set to false in config.json. --- webserver.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/webserver.js b/webserver.js index 2537a8e64e..b7fbbb67f9 100644 --- a/webserver.js +++ b/webserver.js @@ -8803,7 +8803,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates, doneF } xargs.extitle = encodeURIComponent(xargs.title).split('\'').join('\\\''); xargs.domainurl = domain.url; - xargs.autocomplete = (domain.autocomplete === false) ? 'x' : 'autocomplete'; // This option allows autocomplete to be turned off on the login page. + xargs.autocomplete = (domain.autocomplete === false) ? 'autocomplete=off x' : 'autocomplete'; // This option allows autocomplete to be turned off on the login page. if (typeof domain.hide == 'number') { xargs.hide = domain.hide; } // To mitigate any possible BREACH attack, we generate a random 0 to 255 bytes length string here.