From e963b01ce4886d0bb9804521e7c24f219c92e850 Mon Sep 17 00:00:00 2001
From: Oliver Bartsch <bo@cedev.de>
Date: Mon, 21 Mar 2022 13:30:05 +0100
Subject: [PATCH] [BUGFIX] Add autocomplete attribute to confirmation password
The confirmation password, required for accessing
the install tool through the backend, now uses the
autocomplete attribute to prevent password managers
from initiating a "change password" workflow.
Resolves: #92969
Releases: master, 10.4
Change-Id: I27bc81e7ebaa9684b4e15c7208841ca5e3a4338d
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/73998
Tested-by: core-ci <typo3@b13.com>
Tested-by: Oliver Bartsch <bo@cedev.de>
Reviewed-by: Oliver Bartsch <bo@cedev.de>
---
.../Templates/BackendModule/BackendUserConfirmation.html | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/typo3/sysext/install/Resources/Private/Templates/BackendModule/BackendUserConfirmation.html b/typo3/sysext/install/Resources/Private/Templates/BackendModule/BackendUserConfirmation.html
index 4b3697ffd844..a28e9e5ba885 100644
--- a/typo3/sysext/install/Resources/Private/Templates/BackendModule/BackendUserConfirmation.html
+++ b/typo3/sysext/install/Resources/Private/Templates/BackendModule/BackendUserConfirmation.html
@@ -35,9 +35,10 @@
<label for="confirmationPassword">
<f:translate key="LLL:EXT:backend/Resources/Private/Language/locallang.xlf:login.password" />
</label>
+ <f:variable name="autocomplete" value="{f:if(condition: flagInstallToolPassword, then: 'section-install current-password', else: 'current-password')}" />
<f:form.password name="confirmationPassword" id="confirmationPassword" class="form-control"
data="{f:if(condition:flagInstallToolPassword, else:'{rsa-encryption: \'confirmationPasswordInternal\'}')}"
- additionalAttributes="{required: 'required'}" />
+ additionalAttributes="{required: 'required', autocomplete: autocomplete}" />
<!-- Internal password field, e.g. used for ext:rsaauth -->
<f:if condition="{flagInstallToolPassword}">
<f:else>
--
GitLab