[ https://issues.apache.org/jira/browse/OFBIZ-9471?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arun Patidar closed OFBIZ-9471. ------------------------------- Resolution: Fixed Fix Version/s: Upcoming Release Committed in plugin at revision 1801325 Committed in ofbiz-framework at revision 1801324 Thanks Ritesh Kumar for your contribution. > Set autocomplete to off for all the password fields. > ---------------------------------------------------- > > Key: OFBIZ-9471 > URL: https://issues.apache.org/jira/browse/OFBIZ-9471 > Project: OFBiz > Issue Type: Bug > Components: framework > Reporter: Ritesh Kumar > Assignee: Arun Patidar > Priority: Minor > Fix For: Upcoming Release > > Attachments: OFBIZ-9471-FRAMEWORK.patch, OFBIZ-9471-PLUGIN.patch > > > The login and Forget password screens have password inputs. It is a best > practice to disable autocomplete on the password field as it will avoid > caching sensitive data on client site (CC numbers) and avoid storing the > password in an insecure and hackable client-site database. -- This message was sent by Atlassian JIRA (v6.4.14#64029)