Do not autofill when input attribute `autocomplete="new-password"` is set

[marcovtwout]

When a form contains a password type field, you don't always want to autofill it. For example, some user profile forms contain fields that allow the user to set a new password, or otherwise leave it empty. Example:

Some modern browsers (Chrome, Firefox) support a property <input type="password" autocomplete="new-password" that will prevent the browser from autofilling that form.

Can PassIFox/ChromeIPass also honor this attribute?

See:

• http://stackoverflow.com/a/30976223/729324
• https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields
• http://caniuse.com/#search=autocomplete

[pfn]

passifox is a storage extension to firefox, it does not handle auto-fill; firefox does, if firefox honors it, passifox does implicitly.

chromeipass would need to have such support added

On Fri, Feb 24, 2017 at 1:57 AM marcovtwout notifications@github.com wrote:

When a form contains a password type field, you don't always want to autofill it. For example, some user profile forms contain fields that allow the user to set a new password, or otherwise leave it empty. Example: [image: image] https://cloud.githubusercontent.com/assets/438046/23298958/f9bda126-fa7f-11e6-8e5e-e33a81b3ecd8.png

Some modern browsers (Chrome, Firefox) support a property <input type="password" autocomplete="new-password" that will prevent the browser from autofilling that form.

Can PassIFox/ChromeIPass also honor this attribute?

See:

• http://stackoverflow.com/a/30976223/729324

• https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields

• http://caniuse.com/#search=autocomplete

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/pfn/passifox/issues/597, or mute the thread https://github.com/notifications/unsubscribe-auth/AAfQxZ2B4rcTkWMVvGV7GNwDKIvAQ2jiks5rfqmZgaJpZM4MLBS6 .