From: Alexander Ebert <ebert@woltlab.com>
Date: Wed, 27 May 2020 14:09:01 +0000 (+0200)
Subject: Prevent browsers from filling in username/password on unrelated inputs
X-Git-Tag: 5.2.7~35
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=242558bb204e7d8ad7d36df18e68a95399a28db6;p=GitHub%2FWoltLab%2FWCF.git

Prevent browsers from filling in username/password on unrelated inputs
---

diff --git a/wcfsetup/install/files/acp/templates/textOptionType.tpl b/wcfsetup/install/files/acp/templates/textOptionType.tpl
index eaee4e5363..ac502b0031 100644
--- a/wcfsetup/install/files/acp/templates/textOptionType.tpl
+++ b/wcfsetup/install/files/acp/templates/textOptionType.tpl
@@ -1 +1 @@
-<input type="{@$inputType}" id="{$option->optionName}" name="values[{$option->optionName}]" value="{$value}"{if $inputClass} class="{@$inputClass}"{/if}{if $inputType == 'password' || $option->disableAutocomplete} autocomplete="off"{/if}>
+<input type="{@$inputType}" id="{$option->optionName}" name="values[{$option->optionName}]" value="{$value}"{if $inputClass} class="{@$inputClass}"{/if}{if $inputType == 'password'} autocomplete="new-password"{elseif $option->disableAutocomplete} autocomplete="off"{/if}>
diff --git a/wcfsetup/install/files/acp/templates/userAdd.tpl b/wcfsetup/install/files/acp/templates/userAdd.tpl
index 0abc360dfc..3ca491e1e1 100644
--- a/wcfsetup/install/files/acp/templates/userAdd.tpl
+++ b/wcfsetup/install/files/acp/templates/userAdd.tpl
@@ -137,7 +137,7 @@
 						<dl{if $errorType.password|isset} class="formError"{/if}>
 							<dt><label for="password">{lang}wcf.user.password{/lang}</label></dt>
 							<dd>
-								<input type="password" id="password" name="password" value="{$password}" class="medium" autocomplete="off">
+								<input type="password" id="password" name="password" value="{$password}" class="medium" autocomplete="new-password">
 								{if $errorType.password|isset}
 									<small class="innerError">
 										{if $errorType.password == 'empty'}
@@ -153,7 +153,7 @@
 						<dl{if $errorType.confirmPassword|isset} class="formError"{/if}>
 							<dt><label for="confirmPassword">{lang}wcf.user.confirmPassword{/lang}</label></dt>
 							<dd>
-								<input type="password" id="confirmPassword" name="confirmPassword" value="{$confirmPassword}" class="medium" autocomplete="off">
+								<input type="password" id="confirmPassword" name="confirmPassword" value="{$confirmPassword}" class="medium" autocomplete="new-password">
 								{if $errorType.confirmPassword|isset}
 									<small class="innerError">
 										{lang}wcf.user.confirmPassword.error.{@$errorType.confirmPassword}{/lang}