Skip to content

Commit

Permalink
[BUGFIX] Prevent auto-fill in user setup
Browse files Browse the repository at this point in the history
This patch adds the correct value for autocomplete on password field.

Reference: https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#Preventing_autofilling_with_autocompletenew-password

Resolves: #89310
Releases: master, 9.5, 8.7
Change-Id: Ib1a805ddc5e8da14380d9cf7e5b188a67ed54fea
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61824
Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Richard Haeser <richard@maxserv.com>
Reviewed-by: Richard Haeser <richard@maxserv.com>
  • Loading branch information
NeoBlack authored and Richard Haeser committed Sep 30, 2019
1 parent 29b35b8 commit 63ca428
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -556,7 +556,7 @@ protected function renderUserSetup()

if ($type === 'password') {
$value = '';
$noAutocomplete = 'autocomplete="off" ';
$noAutocomplete = 'autocomplete="new-password" ';
$more .= ' data-rsa-encryption=""';
}
$html = '<input id="field_' . htmlspecialchars($fieldName) . '"
Expand Down

0 comments on commit 63ca428

Please sign in to comment.