[Django] #30558: Autocompletion should be disabled in the "Add user" form

3 views

Skip to first unread message

Django

unread,

Jun 11, 2019, 8:47:01 AM6/11/19

to django-...@googlegroups.com

Home > Authentication and Authorization > Users > Add user

There is a form with a "username", "password" and "password confirmation"
input fields. In my case, the browser automatically fills in the first two
inputs with my own username and password every time i need to create a new
user.

I think the HTML input elements in this form should have
`autocomplete="off"` attribute set.

I observe this in Django 1.11.21. Currently have no possibility to test in
newer versions.

I failed to find an existing ticket related to this issue.

--
Ticket URL: <https://code.djangoproject.com/ticket/30558>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,

Jun 11, 2019, 2:17:02 PM6/11/19

to django-...@googlegroups.com

#30558: Autocompletion should be disabled in the "Add user" form.
-------------------------------------+-------------------------------------
Reporter: Vasili Korol | Owner: nobody
Type: | Status: closed
Cleanup/optimization |
Component: contrib.admin | Version: master
Severity: Normal | Resolution: duplicate
Keywords: admin, | Triage Stage:
autocomplete, user | Unreviewed
Has patch: 0 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0

Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by felixxm):

* status: new => closed
* resolution: => duplicate
* version: 1.11 => master
* ui_ux: 1 => 0
* type: Uncategorized => Cleanup/optimization

Comment:

Thanks for this report, we decided to add `autocomplete` attributes to
`contrib.auth` fields, that should fix your issue (see #29379).