From 59d3899cf7329755af5a49c44e80c06886ba3265 Mon Sep 17 00:00:00 2001
From: kobelb <brandon.kobel@elastic.co>
Date: Wed, 5 Feb 2020 13:36:10 -0800
Subject: [PATCH 1/3] Add autocomplete="off" for input type="password" to
 appease the scanners

---
 .../__snapshots__/basic_login_form.test.tsx.snap               | 1 +
 .../login/components/basic_login_form/basic_login_form.tsx     | 1 +
 .../components/change_password_form/change_password_form.tsx   | 3 +++
 3 files changed, 5 insertions(+)

diff --git a/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/__snapshots__/basic_login_form.test.tsx.snap b/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/__snapshots__/basic_login_form.test.tsx.snap
index 9814a2a7784fc..b09f398ed5ed9 100644
--- a/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/__snapshots__/basic_login_form.test.tsx.snap
+++ b/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/__snapshots__/basic_login_form.test.tsx.snap
@@ -64,6 +64,7 @@ exports[`BasicLoginForm renders as expected 1`] = `
       >
         <EuiFieldText
           aria-required={true}
+          autoComplete="off"
           data-test-subj="loginPassword"
           disabled={false}
           id="password"
diff --git a/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/basic_login_form.tsx b/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/basic_login_form.tsx
index c263381fbdb56..d5658cc297c26 100644
--- a/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/basic_login_form.tsx
+++ b/x-pack/legacy/plugins/security/public/views/login/components/basic_login_form/basic_login_form.tsx
@@ -75,6 +75,7 @@ class BasicLoginFormUI extends Component<Props, State> {
               }
             >
               <EuiFieldText
+                autoComplete="off"
                 id="password"
                 name="password"
                 data-test-subj="loginPassword"
diff --git a/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx b/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx
index 6dcf330ec6f9e..63726edeb7763 100644
--- a/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx
+++ b/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx
@@ -72,6 +72,7 @@ export class ChangePasswordForm extends Component<Props, State> {
             }
           >
             <EuiFieldText
+              autoComplete="off"
               data-test-subj="currentPassword"
               type="password"
               value={this.state.currentPassword}
@@ -99,6 +100,7 @@ export class ChangePasswordForm extends Component<Props, State> {
           }
         >
           <EuiFieldText
+            autoComplete="off"
             data-test-subj="newPassword"
             type="password"
             value={this.state.newPassword}
@@ -118,6 +120,7 @@ export class ChangePasswordForm extends Component<Props, State> {
           }
         >
           <EuiFieldText
+            autoComplete="off"
             data-test-subj="confirmNewPassword"
             type="password"
             value={this.state.confirmPassword}

From 3e98081941b11184acd433478684324cd03d0759 Mon Sep 17 00:00:00 2001
From: kobelb <brandon.kobel@elastic.co>
Date: Mon, 10 Feb 2020 07:16:10 -0800
Subject: [PATCH 2/3] Using new-password instead of off for the new/confirm
 passwords

---
 .../components/change_password_form/change_password_form.tsx  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx b/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx
index 63726edeb7763..75621762b1b85 100644
--- a/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx
+++ b/x-pack/plugins/security/public/management/users/components/change_password_form/change_password_form.tsx
@@ -100,7 +100,7 @@ export class ChangePasswordForm extends Component<Props, State> {
           }
         >
           <EuiFieldText
-            autoComplete="off"
+            autoComplete="new-password"
             data-test-subj="newPassword"
             type="password"
             value={this.state.newPassword}
@@ -120,7 +120,7 @@ export class ChangePasswordForm extends Component<Props, State> {
           }
         >
           <EuiFieldText
-            autoComplete="off"
+            autoComplete="new-password"
             data-test-subj="confirmNewPassword"
             type="password"
             value={this.state.confirmPassword}

From 3cad443b137f82d178ee204e11821d88b0b72c6f Mon Sep 17 00:00:00 2001
From: kobelb <brandon.kobel@elastic.co>
Date: Mon, 10 Feb 2020 07:24:22 -0800
Subject: [PATCH 3/3] Setting more autoComplete="new-password" attributes

---
 .../public/management/users/edit_user/edit_user_page.tsx        | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/x-pack/plugins/security/public/management/users/edit_user/edit_user_page.tsx b/x-pack/plugins/security/public/management/users/edit_user/edit_user_page.tsx
index 576f3ff9e6008..8e7d9fb2dac08 100644
--- a/x-pack/plugins/security/public/management/users/edit_user/edit_user_page.tsx
+++ b/x-pack/plugins/security/public/management/users/edit_user/edit_user_page.tsx
@@ -204,6 +204,7 @@ export class EditUserPage extends Component<Props, State> {
           {...this.validator.validatePassword(this.state.user)}
         >
           <EuiFieldText
+            autoComplete="new-password"
             data-test-subj="passwordInput"
             name="password"
             type="password"
@@ -218,6 +219,7 @@ export class EditUserPage extends Component<Props, State> {
           {...this.validator.validateConfirmPassword(this.state.user)}
         >
           <EuiFieldText
+            autoComplete="new-password"
             data-test-subj="passwordConfirmationInput"
             onChange={this.onConfirmPasswordChange}
             name="confirm_password"