Adding autocomplete=off in the webGUI forms
Doing a diff between config.xml versions, I noticed that my pfsense's password was stored in plaintext format in
Checking further, it seems that the Password Manager of my Firefox browser silently auto-completes the proxy username/pass form at System -> Advanced -> Misc
Probably needs a autocomplete="off" to prevent that.
PS: Same problem with the CP voucher webpage last year (which now includes the autocomplete="off" setting).