Set login autocomplete to off when set to false in config.json.
Ylian Saint-Hilaire committed
Mar 24, 2024 at 11:03 UTC
8775b7dcf7866fc3ae99bebe750ef3df0fe2f0c8
1 file changed
+1
-1
webserver.js
+1
-1
@@ -8803,7 +8803,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates, doneF
8803
}
8804
xargs.extitle = encodeURIComponent(xargs.title).split('\'').join('\\\'');
8805
xargs.domainurl = domain.url;
8806
- xargs.autocomplete = (domain.autocomplete === false) ? 'x' : 'autocomplete'; // This option allows autocomplete to be turned off on the login page.
8806
+ xargs.autocomplete = (domain.autocomplete === false) ? 'autocomplete=off x' : 'autocomplete'; // This option allows autocomplete to be turned off on the login page.
8807
if (typeof domain.hide == 'number') { xargs.hide = domain.hide; }
8808
8809
// To mitigate any possible BREACH attack, we generate a random 0 to 255 bytes length string here.