[BUGFIX] Avoid autocompletion in TCA type password
The autocomplete="off" parameter is ignored by current browsers, autocomplete="new-password" is to be used for disable autocompletion. The explicit request for autocompleting the password is autocomplete="current-password", which is now used in case config TCA autocomplete is set. See following article for more information: * https://web.dev/articles/sign-in-form-best-practices#new-password * https://web.dev/articles/sign-in-form-best-practices#current-password Resolves: #103067 Related: #97104 Releases: main, 12.4 Change-Id: Ice3c7a50020d7e17b14c51dc89c1c8e1700fe9a6 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/82830 Reviewed-by:Andreas Kienast <a.fernandez@scripting-base.de> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Oliver Klee <typo3-coding@oliverklee.de> Reviewed-by:
Benni Mack <benni@typo3.org> Tested-by:
core-ci <typo3@b13.com> Reviewed-by:
Simon Schaufelberger <simonschaufi+typo3@gmail.com> Reviewed-by:
Benjamin Franzke <ben@bnf.dev> Tested-by:
Simon Schaufelberger <simonschaufi+typo3@gmail.com> Tested-by:
Benjamin Franzke <ben@bnf.dev>
Showing
- typo3/sysext/backend/Classes/Form/Element/PasswordElement.php 1 addition, 1 deletion...3/sysext/backend/Classes/Form/Element/PasswordElement.php
- typo3/sysext/core/Documentation/Changelog/12.0/Feature-97104-NewTCATypePassword.rst 2 additions, 2 deletions...ation/Changelog/12.0/Feature-97104-NewTCATypePassword.rst
Please register or sign in to comment