datta90 opened a new issue, #40125: URL: https://github.com/apache/airflow/issues/40125
### Apache Airflow version Other Airflow 2 version (please specify below) ### If "Other Airflow 2 version" selected, which one? 2.8.1 ### What happened? my company vulnerability scanning tool has reported that the login page of airflow should have autocomplete field set to off ### What you think should happen instead? the autocomplete parameter should be set to off in the password field ### How to reproduce simply doing a curl request on the airflow url with /login appended will reveal a html page where we see that the password field does not have autocomplete set for eg curl -X GET http://airflow:8080/login ### Operating System rhel 8.9 ### Versions of Apache Airflow Providers _No response_ ### Deployment Virtualenv installation ### Deployment details using virtualenv to install airflow ### Anything else? _No response_ ### Are you willing to submit PR? - [ ] Yes I am willing to submit a PR! ### Code of Conduct - [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
