loginForm Attribute Set Autocomplete=off
Confluence User - 16 Dec, 2021
good day,
is there any property editor to set attribute for login form ? VA tools detect this as not secure. right now for workaround only using javascript to disable autocomplete. so far edge and firefox ok, but chrome still popup list of value keyed previously. here default login form generated by joget :
<form id="loginForm" name="loginForm" action="/jw/j_spring_security_check?OWASP_CSRFTOKEN=JXB9-S7ZL-XWSC-DA81-N7WV-E4G3-LLW4-LO0Y" method="POST">
<table align="center">
<tbody><tr><td><label>Username: </label></td><td><input type="text" id="j_username" name="j_username" autocomplete="disabled"></td></tr>
<tr><td><label>Password: </label></td><td><input type="password" id="j_password" name="j_password" autocomplete="disabled"></td></tr>
<tr><td> </td><td><input name="submit" class="form-button btn" type="submit" value="Login" autocomplete="disabled"></td></tr>
<tr><td colspan="2">
<a rel="popup" style="cursor:pointer;text-decoration:underline;" onclick="forgotPassword();return false;">Forgot Password</a>
<script>function forgotPassword(){new PopupDialog('/jw/web/json/plugin/org.joget.plugin.directory.UserSecurityImpl/service?a=fp', ' ').init();}</script>
</td></tr>
</tbody></table>
<input type="hidden" name="OWASP_CSRFTOKEN" value="JXB9-S7ZL-XWSC-DA81-N7WV-E4G3-LLW4-LO0Y" autocomplete="disabled"></form>
custom userview js :
setTimeout(function(){ $('input').attr('autocomplete', 'disabled'); }, 400);
forms