Password formcontrol should prevent autocomplete for new password forms

Description

When entering new passwords (e.g. within Admin, for other people) browsers should not fill password fields using an existing password. This can be achieved by setting the autocomplete="new-password" attribute, for many browsers:

https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields

Activity

Show:
Dominic Watson
July 20, 2020, 9:49 AM

Brilliant. Thanks - releasing in hotfix 10.11.59.

Assignee

Unassigned

Reporter

Sacha Moufarrege

Labels

None

Accepted

Yes

Fix versions

Priority

Low
Configure