General developer forum

Turn off auto complete on password textbox

 
Picture of Robert Payne
Re: Turn off auto complete on password textbox
 

I've noticed this is a problem for anyone editing user profiles too. The username and password gets automatically filled in to the Address and User Salt fields at the end of the page.

example

This can lead to the editing user's username and password being leaked if they're not attentive because the user salt is displayed when you view the user's profile after.

example2

I've noticed this as a problem since our site was 2.9, we're currently on 3.3 and it's still present.

 
Average of ratings: -