[ 
https://issues.apache.org/struts/browse/STR-2810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=44536#action_44536
 ] 

Jim Manico commented on STR-2810:
---------------------------------

This is a fairly important security issue - why has it not been rolled into the 
main trunk of struts?

> autocomplete attribute
> ----------------------
>
>                 Key: STR-2810
>                 URL: https://issues.apache.org/struts/browse/STR-2810
>             Project: Struts 1
>          Issue Type: Improvement
>          Components: Tag Libraries
>    Affects Versions: 1.3.1
>         Environment: Operating System: other
> Platform: All
>            Reporter: Mark Lowe
>            Assignee: Struts Developers
>            Priority: Minor
>         Attachments: BaseInputTag.java.patch.java, FormTag.java.patch.java, 
> struts-html.tld.patch
>
>
> the non standard attribute autocomplete cannot be deactivated (i.e. 
> autocomplete="off" ) without 
> subclassing the tag class itself and editing tld files, effectively forking 
> from the struts code base.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to