FormEngine username and password fields must have autocomplete=off
This avoids that browsers (especially Chrome) go nuts and prefill those fields with stored auth data and therefore adjust the user's password.
This is especially critical if you edit be_users, as the password field is preset with 8 asterisks by FormEngine as "do not change"-value. But the browser then overwrites this value with some stored foo. There is no sane way for the user to restore the "do not change"-value to avoid changing the password.
[FEATURE] Add TCA autocomplete setting for input fields
This patch adds an additional TCA configuration for input fields to
switch on or off auto completion. This is used for username and password
fields for frontend and backend users.
Reviewed-by: Nicole Cordes <email@example.com>
Tested-by: Nicole Cordes <firstname.lastname@example.org>
Reviewed-by: Andreas Fernandez <email@example.com>
Reviewed-by: Georg Ringer <firstname.lastname@example.org>
Tested-by: Georg Ringer <email@example.com>
Reviewed-by: Benni Mack <firstname.lastname@example.org>
Tested-by: Benni Mack <email@example.com>