[OFBIZ-9471] Set autocomplete to off for all the password fields.

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 17.12.01
• Component/s: framework
• Labels: backport-needed
• Assignee: Arun Patidar
• Reporter: Ritesh Kumar
• Created: 08/Jul/17 17:38
• Updated: 26/Jul/17 16:09
• Resolved: 22/Jul/17 11:00

Description

The login and Forget password screens have password inputs. It is a best practice to disable autocomplete on the password field as it will avoid caching sensitive data on client site (CC numbers) and avoid storing the password in an insecure and hackable client-site database.