Skip to content

Commit

Permalink
[TASK] Mitigate Browser "Spell-Jacking" in additional form elements
Browse files Browse the repository at this point in the history
Disables spell checking in additional form elements:
* Setup Module `<form>` element
* ext:felogin `<form onsubmit>` element

See issue #98492 for details.

Resolves: #98504
Related: #98492
Releases: main
Change-Id: Ib3c7b39d05f1c2baed173ab506666e3661cbb519
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/75945
Tested-by: core-ci <typo3@b13.com>
Tested-by: Kevin Appelt <kevin.appelt@icloud.com>
Tested-by: Torben Hansen <derhansen@gmail.com>
Tested-by: Oliver Hader <oliver.hader@typo3.org>
Reviewed-by: Kevin Appelt <kevin.appelt@icloud.com>
Reviewed-by: Torben Hansen <derhansen@gmail.com>
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>
  • Loading branch information
ohader committed Oct 3, 2022
1 parent 2b27de1 commit a38da44
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 1 deletion.
Expand Up @@ -15,7 +15,7 @@ <h3>
</f:if>
<f:if condition="{onSubmit}">
<f:then>
<f:form target="_top" fieldNamePrefix="" action="login" onsubmit="{onSubmit}" requestToken="{requestToken}">
<f:form target="_top" fieldNamePrefix="" action="login" onsubmit="{onSubmit}" requestToken="{requestToken}" additionalAttributes="{spellcheck: 'false'}">
<f:render section="content" arguments="{_all}"/>
</f:form>
</f:then>
Expand Down
1 change: 1 addition & 0 deletions typo3/sysext/setup/Resources/Private/Templates/Main.html
Expand Up @@ -24,6 +24,7 @@
id="SetupModuleController"
name="usersetup"
enctype="multipart/form-data"
spellcheck="false"
>
<div id="user-setup-wrapper">
<h1>
Expand Down

0 comments on commit a38da44

Please sign in to comment.