Project

General

Profile

Actions

Bug #12403

closed

WireGuard tunnel and peer edit pages do not prevent browser auto-fill

Added by Jim Pingle over 2 years ago. Updated about 2 years ago.

Status:
Resolved
Priority:
Normal
Category:
WireGuard
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

The WireGuard tunnel (vpn_wg_tunnels_edit.php) and peer (vpn_wg_peers_edit.php) edit pages do not prevent the browser from auto-filling content. As a result, some of the form fields get populated by the browser unintentionally. For example, on the tunnel page it wants to fill a username in Listen Port, a password in Interface Keys, and on the peers page it wants to fill the username in Public Key and the password in Pre-shared Key.

There is an easy way around this by setting the field autocomplete property to new-password, check the commits from #9864, such as https://github.com/pfsense/pfsense/commit/659a8a26d12b75399063dae060fa32fa23751dbf

Actions

Also available in: Atom PDF