In OPAC password recovery form autocomplete is not disabled. So when login or email is entered, it is saved in browser input history for autocomplete. This is a major issue for OPAC on computers with public access.
Created attachment 65092 [details] [review] Bug 18955 - autocomplete is on in OPAC password recovery In OPAC password recovery form autocomplete is not disabled. So when login or email is entered, it is saved in browser input history for autocomplete. This is a major issue for OPAC on computers with public access. This patch adds autocomplete off on forms. Test : - Enable system preferences OpacPasswordChange and OpacResetPassword - Go to OPAC - Be sure to not be logged in - Click on "Forgot your password?" - Enter a loggin and email and Submit => Without patch there is an autocompletion with values you entered => With patch there is no autocompletion
Created attachment 65138 [details] [review] Bug 18955 - autocomplete is on in OPAC password recovery In OPAC password recovery form autocomplete is not disabled. So when login or email is entered, it is saved in browser input history for autocomplete. This is a major issue for OPAC on computers with public access. This patch adds autocomplete off on forms. Test : - Enable system preferences OpacPasswordChange and OpacResetPassword - Go to OPAC - Be sure to not be logged in - Click on "Forgot your password?" - Enter a loggin and email and Submit => Without patch there is an autocompletion with values you entered => With patch there is no autocompletion Signed-off-by: Marc Véron <veron@veron.ch>
Created attachment 65165 [details] [review] Bug 18955 - autocomplete is on in OPAC password recovery In OPAC password recovery form autocomplete is not disabled. So when login or email is entered, it is saved in browser input history for autocomplete. This is a major issue for OPAC on computers with public access. This patch adds autocomplete off on forms. Test : - Enable system preferences OpacPasswordChange and OpacResetPassword - Go to OPAC - Be sure to not be logged in - Click on "Forgot your password?" - Enter a loggin and email and Submit => Without patch there is an autocompletion with values you entered => With patch there is no autocompletion Signed-off-by: Marc Véron <veron@veron.ch> Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Pushed to master for 17.11, thanks to everybody involved!
Pushed to 17.05.x, will be in 17.05.02.
This patch has been pushed to 16.11.x and will be in 16.11.10.
Pushed to 16.05.x, for 16.05.15 release