Project

General

Profile

Actions

Defect #25145

closed

Disable Autocomplete in redmine login page

Added by ajeesh b almost 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
UI
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Duplicate
Affected version:

Description

Hi I would like to disable autocomplete feature to disabled. Login user fields have the autocomplete feature enabled.
Worst Case Scenario
User login credentials could be stolen in specific scenarios. There is high change of retrieving valid accounts
when computers are shared between several users by double clicking the username field ("username") in the
login pages. Once the attacker has a valid set of users, those can be used in brute force attacks.


Related issues

Is duplicate of Redmine - Defect #4043: username/password fields get autocompletedNew2009-10-17

Actions
Actions #1

Updated by Go MAEDA almost 8 years ago

  • Is duplicate of Defect #4043: username/password fields get autocompleted added
Actions #2

Updated by Go MAEDA almost 8 years ago

  • Category set to UI
  • Status changed from New to Closed
  • Resolution set to Duplicate

Closing this issue as a duplicate of #4043.
Thank you for reporting.

Actions

Also available in: Atom PDF