SamuelTallet / MongoDB-PHP-GUI

Open-source graphical interface for MongoDB database. Written in PHP, JavaScript, HTML & CSS.
142 stars 33 forks source link

Login page: do not retain credentials #38

Open boly38 opened 2 years ago

boly38 commented 2 years ago

Hi

On login page we set some sensible credentials (ex. db access). image

As php gui user, I dont want that the browser retains form value for this field. I dont want autocomplete. I dont want to be able to retrieve mongodb url from my previous access.

Technically, the input may have autocomplete="off" or type=password somewhere .. to dig.

Please notice that this issue is not the opposite of #37 but independant enhancement. This issue drives the "default browser behavior". At the end, if the user want to store some information, this is a choice that should not be forced.

This is a security issue. Thanks Regards