Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When changing another user's password, prevent password field to be auto filled by password manager #14711

Open
mattab opened this issue Jul 30, 2019 · 1 comment
Labels
c: Usability For issues that let users achieve a defined goal more effectively or efficiently.

Comments

@mattab
Copy link
Member

mattab commented Jul 30, 2019

Reported by a user:

I experienced a weird issue with my LastPass (https://lastpass.com) client in Chrome: it auto-filled the user password field with the value of the superuser password (which you know is requested from the su before allowing to submit the form). As result the user gets it's password overwritten. This is not exactly your problem, but I guess you might want to know that, so you can get to LastPass with it.

-> Goal of this issue would be to prevent this auto-filling of password while changing another user's password. Maybe sufficient to rename the password input field name on the "edit user" screen?

@mattab mattab added the c: Usability For issues that let users achieve a defined goal more effectively or efficiently. label Jul 30, 2019
@Findus23
Copy link
Member

Findus23 commented Aug 1, 2019

There is a nice autocomplete="off" HTML attribute, but thanks to banks and other companies, who thought disabling password managers for their login would make them more secure, all Browsers ignore it. So there are only ugly hacks left or moving the password to a separate page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: Usability For issues that let users achieve a defined goal more effectively or efficiently.
Projects
None yet
Development

No branches or pull requests

2 participants