From 242558bb204e7d8ad7d36df18e68a95399a28db6 Mon Sep 17 00:00:00 2001
From: Alexander Ebert <ebert@woltlab.com>
Date: Wed, 27 May 2020 16:09:01 +0200
Subject: [PATCH] Prevent browsers from filling in username/password on
 unrelated inputs

---
 wcfsetup/install/files/acp/templates/textOptionType.tpl | 2 +-
 wcfsetup/install/files/acp/templates/userAdd.tpl        | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/wcfsetup/install/files/acp/templates/textOptionType.tpl b/wcfsetup/install/files/acp/templates/textOptionType.tpl
index eaee4e5363..ac502b0031 100644
--- a/wcfsetup/install/files/acp/templates/textOptionType.tpl
+++ b/wcfsetup/install/files/acp/templates/textOptionType.tpl
@@ -1 +1 @@
-<input type="{@$inputType}" id="{$option->optionName}" name="values[{$option->optionName}]" value="{$value}"{if $inputClass} class="{@$inputClass}"{/if}{if $inputType == 'password' || $option->disableAutocomplete} autocomplete="off"{/if}>
+<input type="{@$inputType}" id="{$option->optionName}" name="values[{$option->optionName}]" value="{$value}"{if $inputClass} class="{@$inputClass}"{/if}{if $inputType == 'password'} autocomplete="new-password"{elseif $option->disableAutocomplete} autocomplete="off"{/if}>
diff --git a/wcfsetup/install/files/acp/templates/userAdd.tpl b/wcfsetup/install/files/acp/templates/userAdd.tpl
index 0abc360dfc..3ca491e1e1 100644
--- a/wcfsetup/install/files/acp/templates/userAdd.tpl
+++ b/wcfsetup/install/files/acp/templates/userAdd.tpl
@@ -137,7 +137,7 @@
 						<dl{if $errorType.password|isset} class="formError"{/if}>
 							<dt><label for="password">{lang}wcf.user.password{/lang}</label></dt>
 							<dd>
-								<input type="password" id="password" name="password" value="{$password}" class="medium" autocomplete="off">
+								<input type="password" id="password" name="password" value="{$password}" class="medium" autocomplete="new-password">
 								{if $errorType.password|isset}
 									<small class="innerError">
 										{if $errorType.password == 'empty'}
@@ -153,7 +153,7 @@
 						<dl{if $errorType.confirmPassword|isset} class="formError"{/if}>
 							<dt><label for="confirmPassword">{lang}wcf.user.confirmPassword{/lang}</label></dt>
 							<dd>
-								<input type="password" id="confirmPassword" name="confirmPassword" value="{$confirmPassword}" class="medium" autocomplete="off">
+								<input type="password" id="confirmPassword" name="confirmPassword" value="{$confirmPassword}" class="medium" autocomplete="new-password">
 								{if $errorType.confirmPassword|isset}
 									<small class="innerError">
 										{lang}wcf.user.confirmPassword.error.{@$errorType.confirmPassword}{/lang}
-- 
2.20.1