[TYPO3-core] RFC #12236: Password-field in "User Settings" is prefilled, which does not make sense

[Steffen Gebert]

Am 14.10.2009, 19:08 Uhr, schrieb Steffen Gebert  
<steffen at steffen-gebert.de>:

> http://bugs.typo3.org/view.php?id=12236
>
> Branches: trunk
>
> Problem:
> If you enable auto-fill-out of password-fields in your browser, the
> browser also fills the password in the first password field in the module
> "user settings".
> There is no usecase for this behaviour. There are 2 possible cases:
> 1. If you want to change the password, you will want to enter a new one.
> But the browser does not have this new password saved, so auto-filling  
> the
> old password does not make sense, because it won't work. You will instead
> have to empty the field manually, which is a needless task.
> 2. If you don't want to change the password, it does not make sense to
> fill the field either, as you don't want to change anything. If you press
> save, without filling in the password again in field 2, you get an  
> error...
>
> So the current behaviour, if auto-filling is enabled, is not really
> user-friendly
>
> Solution:
> Add attribute autocomplete="off" to the <input type="password"> [1,2]

It would be nice to get one core-dev review.

Since I wrote this patch and saved my password, it annoys me, as it's now  
allways filled in :(

Thanks
Steffen