https://www.redmine.org/https://www.redmine.org/favicon.ico?16793021292009-10-17T02:01:03ZRedmineRedmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=114372009-10-17T02:01:03ZStefan Stefansson
<ul></ul><p>Another place this happens is in a projects Setting -> Repository form. There, my usernam/password get automatically filled in even though they're supposed to be empty.</p> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=115612009-10-23T23:58:33ZEwan Makepeace
<ul></ul><p>I had similar problems on one of my own sites and even changing the field names did not solve it - it seems that some browsers see the PASSWORD field type and enter your password for you no matter what you call the field...</p> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=452762013-02-05T09:54:17ZDaniel Felix
<ul><li><strong>File</strong> <a href="/attachments/8975">autocomplete.diff</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/8975/autocomplete.diff">autocomplete.diff</a> added</li></ul><p>Hi,</p>
<p>I attached a patch for fixing the login autocomplete.</p>
<p><a class="user active" href="https://www.redmine.org/users/1460">Stefan Heinsen</a>: I couldn't found your point. Can you give me some screenshot for this?</p> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=452772013-02-05T10:18:56ZEtienne Massip
<ul></ul><p>Daniel Felix wrote:</p>
<blockquote>
<p>I attached a patch for fixing the login autocomplete.</p>
</blockquote>
<p>This should not be set for login but for registration (<a class="source" href="https://www.redmine.org/projects/redmine/repository/svn/revisions/9440/entry/trunk/app/views/account/register.html.erb">source:/trunk/app/views/account/register.html.erb@9440</a>).</p> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=452782013-02-05T11:01:17ZStefan Stefansson
<ul><li><strong>File</strong> <a href="/attachments/8976">redmine_autocomplete1.png</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/8976/redmine_autocomplete1.png">redmine_autocomplete1.png</a> added</li><li><strong>File</strong> <a href="/attachments/8977">redmine_autocomplete2.png</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/8977/redmine_autocomplete2.png">redmine_autocomplete2.png</a> added</li></ul><p>Attached are two screenshots that I could get (sorry about all the blurring).</p>
<p>The screenshots are from:<br />1) (in each project) -> Settings -> Repository</p>
<blockquote>
<p>Here it autofills the username/password for the repository URL with my login information for Redmine. More often than not there is no username/password needed for this and since this gets autofilled it's particularly bad since that means that when doing any changes you'll need to remember to remove the autofilled information.</p>
</blockquote>
<p>2) Administration -> LDAP Authentication -> (pick any available configuration)</p>
<blockquote>
<p>Again this autofills with my username/password to the Redmine setup while this field is intended for an LDAP user.</p>
</blockquote>
<p>Both of the above fields are <ins>registration</ins> fields and the general rule should be to set autocomplete to off for <ins>any registration</ins> fields.</p>
<p>So I will assume that Etienne Massip's suggestion is correct and you should put it in the register.html.erb template. Furthermore it should be put in the templates for the two screenshots I provided (LDAP authentication and Repository settings) and lastly as I pointed out in the original report when the user changes password (I can't provide a screenshot of that or the registration since we have that turned off in our setup, users are created in the LDAP directory).</p>
<p>I hope this is clear enough but I should note that the Redmine version we're running on is getting quite old so there is a chance that paths or locations have changed.</p> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=452892013-02-05T20:31:33ZDaniel Felix
<ul><li><strong>File</strong> <a href="/attachments/8979">autocomplete_v2.diff</a> <a class="icon-only icon-download" title="Download" href="/attachments/download/8979/autocomplete_v2.diff">autocomplete_v2.diff</a> added</li></ul><p>Sorry, I haven't read "registration", just login. :-)</p>
<p>I attached a newer version. I searched for it but I couldn't find any svn password. Well this could be, as we aren't using SVN anymore. But maybe Jean-Philippe or Toshi know where to find them.</p> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=678922015-12-13T12:39:31ZGo MAEDA
<ul></ul><p>Modern browsers don't support autocomplete="off".</p>
<p><strong>IE11+:</strong><br /><a class="external" href="https://msdn.microsoft.com/library/ms533486.aspx">https://msdn.microsoft.com/library/ms533486.aspx</a></p>
<blockquote>
<p>As of Internet Explorer 11, the autocomplete property is no longer supported for input type=password fields.</p>
</blockquote>
<p><strong>Firefox 30+:</strong><br /><a class="external" href="https://www.fxsitecompat.com/en-US/docs/2014/form-autocomplete-off-no-longer-prevents-passwords-from-being-saved/">https://www.fxsitecompat.com/en-US/docs/2014/form-autocomplete-off-no-longer-prevents-passwords-from-being-saved/</a></p>
<blockquote>
<p><form autocomplete="off"> no longer prevents passwords from being saved</p>
</blockquote>
<p><strong>Chrome 34+:</strong><br /><a class="external" href="http://googlechromereleases.blogspot.ro/2014/04/stable-channel-update.html">http://googlechromereleases.blogspot.ro/2014/04/stable-channel-update.html</a></p>
<blockquote>
<p>Chrome will now offer to remember and fill password fields in the presence of autocomplete=off.</p>
</blockquote> Redmine - Defect #4043: username/password fields get autocompletedhttps://www.redmine.org/issues/4043?journal_id=768182017-02-22T00:52:36ZGo MAEDA
<ul><li><strong>Has duplicate</strong> <i><a class="issue tracker-1 status-5 priority-4 priority-default closed" href="/issues/25145">Defect #25145</a>: Disable Autocomplete in redmine login page</i> added</li></ul>