[BUGFIX] Add autocomplete attribute to confirmation password

The confirmation password, required for accessing
the install tool through the backend, now uses the
autocomplete attribute to prevent password managers
from initiating a "change password" workflow.

Resolves: #92969
Releases: master, 10.4
Change-Id: I27bc81e7ebaa9684b4e15c7208841ca5e3a4338d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/73998


Tested-by: core-ci <typo3@b13.com>
Tested-by: Oliver Bartsch <bo@cedev.de>
Reviewed-by: Oliver Bartsch <bo@cedev.de>

typo3/sysext/install/Resources/Private/Templates/BackendModule/BackendUserConfirmation.html

@@ -35,9 +35,10 @@
                                     <label for="confirmationPassword">
                                         <f:translate key="LLL:EXT:backend/Resources/Private/Language/locallang.xlf:login.password" />
                                     </label>
+                                    <f:variable name="autocomplete" value="{f:if(condition: flagInstallToolPassword, then: 'section-install current-password', else: 'current-password')}" />
                                     <f:form.password name="confirmationPassword" id="confirmationPassword" class="form-control"
                                                     data="{f:if(condition:flagInstallToolPassword, else:'{rsa-encryption: \'confirmationPasswordInternal\'}')}"
-                                                    additionalAttributes="{required: 'required'}" />
+                                                    additionalAttributes="{required: 'required', autocomplete: autocomplete}" />
                                     <!-- Internal password field, e.g. used for ext:rsaauth -->
                                     <f:if condition="{flagInstallToolPassword}">
                                         <f:else>