[BUGFIX] Add autocomplete attribute to confirmation password

The confirmation password, required for accessing
the install tool through the backend, now uses the
autocomplete attribute to prevent password managers
from initiating a "change password" workflow.

Resolves: #92969
Releases: master, 10.4
Change-Id: I27bc81e7ebaa9684b4e15c7208841ca5e3a4338d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/71501


Tested-by: core-ci <typo3@b13.com>
Tested-by: Benni Mack <benni@typo3.org>
Tested-by: Jochen <rothjochen@gmail.com>
Tested-by: Oliver Bartsch <bo@cedev.de>
Reviewed-by: Benni Mack <benni@typo3.org>
Reviewed-by: Oliver Klee <typo3-coding@oliverklee.de>
Reviewed-by: Nikita Hovratov <nikita.h@live.de>
Reviewed-by: Jochen <rothjochen@gmail.com>
Reviewed-by: Oliver Bartsch <bo@cedev.de>

typo3/sysext/install/Resources/Private/Templates/BackendModule/BackendUserConfirmation.html

@@ -34,8 +34,9 @@
                                 <label for="confirmationPassword">
                                     <f:translate key="LLL:EXT:backend/Resources/Private/Language/locallang.xlf:login.password" />
                                 </label>
+                                <f:variable name="autocomplete" value="{f:if(condition: flagInstallToolPassword, then: 'section-install current-password', else: 'current-password')}" />
                                 <f:form.password name="confirmationPassword" id="confirmationPassword" class="form-control"
-                                                additionalAttributes="{required: 'required'}" />
+                                                additionalAttributes="{required: 'required', autocomplete: autocomplete}" />
                                 <f:form.hidden name="flags" value="{flags}" />
                             </div>
                         </div>