From b35189d8ef6e1042c5ef0d8e280852f9be233432 Mon Sep 17 00:00:00 2001 From: Bruce Bolt Date: Fri, 14 Feb 2020 14:17:24 +0000 Subject: [PATCH] Disable autocomplete for 2FA input when logging in The 2FA code input permits autocompletion. The code is different for each login, so the autocomplete is not useful. --- app/views/devise/two_step_verification_session/new.html.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/views/devise/two_step_verification_session/new.html.erb b/app/views/devise/two_step_verification_session/new.html.erb index 673e3a50d..bbeb319eb 100644 --- a/app/views/devise/two_step_verification_session/new.html.erb +++ b/app/views/devise/two_step_verification_session/new.html.erb @@ -11,7 +11,7 @@ name: "code", autofocus: true, tabindex: 0, - # TODO: disable autocomplete + autocomplete: "off", hint: "Use the 6-digit verification app on your phone to get your code. You won’t need to do this again for 30 days." } %>