github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-30 23:23:58 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: Don't autocomplete the password confirmation field

Browse Source 
We currently use that field for our honeypot. However, since it's a
`type=password` certain browsers like chrome were autofilling it.
Normally this isn't a problem, but if you are using subfolders on the
same host the challenge would be different and Discourse would fail the
challenge.
This commit is contained in:
Robin Ward 2018-04-13 09:38:59 -04:00
parent 3632b8d8d6
commit 1a410660f6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/assets/javascripts/discourse/templates/modal/create-account.hbs
View File

@ -79,7 +79,7 @@
<tr class="password-confirmation">
<td><label for='new-account-password-confirmation'>{{i18n 'user.password_confirmation.title'}}</label></td>
<td>
{{input type="password" value=accountPasswordConfirm id="new-account-confirmation"}}
{{input type="password" value=accountPasswordConfirm id="new-account-confirmation" autocomplete="false"}}
{{input value=accountChallenge id="new-account-challenge"}}
</td>
</tr>