Project

General

Profile

Actions

Bug #2459

closed
DH

Adding autocomplete=off in the webGUI forms

Bug #2459: Adding autocomplete=off in the webGUI forms

Added by Dim Hatz over 14 years ago. Updated about 14 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
Start date:
05/29/2012
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:

Description

Doing a diff between config.xml versions, I noticed that my pfsense's password was stored in plaintext format in

<proxyuser>admin</proxyuser>
<proxypass>password</proxypass>

Checking further, it seems that the Password Manager of my Firefox browser silently auto-completes the proxy username/pass form at System -> Advanced -> Misc

Probably needs a autocomplete="off" to prevent that.

PS: Same problem with the CP voucher webpage last year (which now includes the autocomplete="off" setting).

CB Updated by Chris Buechler over 14 years ago Actions #1

  • Target version set to 2.1
  • Affected Version changed from 2.1 to All

JP Updated by Jim Pingle over 14 years ago Actions #2

Apparently you can do this in jQuery by sticking one line in the file somewhere:

$('input').attr('autocomplete','off');

Just have that go on any page that isn't the login form and it should take care of it.

JP Updated by Jim Pingle over 14 years ago Actions #3

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:fec04267ea5303333839a45149e3cc2edc8250ff.

CC Updated by Carlos Cesario about 14 years ago Actions #4

Is working as expected.

JP Updated by Jim Pingle about 14 years ago Actions #5

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom