[JIRA] (JENKINS-46970) I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins.

[kwoodie@gmail.com (JIRA)]

Keith Woodie assigned an issue to Keith Woodie

I have a pull request for this.  Reassigning so that I can request Jenkins / JENKINS-46970 I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins. Change By: Keith Woodie Assignee: Oleg Nenashev Keith Woodie Add Comment

This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e)

[kwoodie@gmail.com (JIRA)]

Keith Woodie reopened an issue

I have a pull request where I have corrected this on the main login page.   This is a simple attribute on the password input field that will help resolve scanning issues such as these for enterprise users.

Jenkins / JENKINS-46970 I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins.

Change By: Keith Woodie Resolution: Won't Fix Status: Resolved Reopened

Add Comment

[kwoodie@gmail.com (JIRA)]

Keith Woodie started work on JENKINS-46970

Change By: Keith Woodie Status: Reopened In Progress

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev commented on JENKINS-46970

Re: I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins. It would be nice if you provide a pull request link

Add Comment

[kwoodie@gmail.com (JIRA)]

Keith Woodie commented on JENKINS-46970

Re: I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins.

https://github.com/jenkinsci/jenkins/pull/3299

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev updated an issue

Jenkins / JENKINS-46970

I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins.

Change By: Oleg Nenashev Component/s: core Component/s: _unsorted

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev updated JENKINS-46970

Jenkins / JENKINS-46970 I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins.

Change By: Oleg Nenashev Status: In Progress Review

Add Comment

[sakiran123@gmail.com (JIRA)]

Kiran Joseph S A commented on JENKINS-46970

Re: I work for a banking company and in our regular security scans. we are getting an error saying that "Autocomplete Attribute Not Disabled for Password in form based Authentication" for Jenkins. I have added "extended-security-settings-plugin" v1.1 to jenkins and submitted for scan, it still shows the vulnerability. Any idea ?

Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)