Actions
Bug #70126
closedFormEngine username and password fields must have autocomplete=off
Start date:
2015-09-26
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
7
PHP Version:
Tags:
Complexity:
medium
Is Regression:
No
Sprint Focus:
Description
This avoids that browsers (especially Chrome) go nuts and prefill those fields with stored auth data and therefore adjust the user's password.
This is especially critical if you edit be_users, as the password field is preset with 8 asterisks by FormEngine as "do not change"-value. But the browser then overwrites this value with some stored foo. There is no sane way for the user to restore the "do not change"-value to avoid changing the password.
Actions