Secureinputpass
Categories
Component ID
2173689
Component name
Secureinputpass
Component type
module
Maintenance status
Development status
Component security advisory coverage
not-covered
Component created
Component changed
Component body
This module alters the password fields adding the attribute 'autocomplete = off' according to the HTML5 standard for these fields.
Password fields that do not have autocomplete turned off allow access to previous password entries on a page. This enables attackers (with local access to an authorized client) to discover and abuse passwords .
The "autocomplete" attribute has been standardized in the HTML5 standard. W3C's site states that the attribute has two states, "on" and "off", and that omitting it altogether is equivalent to setting it to "on".