Mercurial > p > roundup > code
diff CHANGES.txt @ 8058:0e382e97f0e3
fix: disable spellchecking for password fields
Some browser can send password to a server for spellchecking. This
gives the browser a strong hint that they should not spellcheck a
password. Since a Password is not supposed to be a real word in any
language, spellchecking is worthless.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sun, 07 Jul 2024 10:49:40 -0400 |
| parents | 19cef1e285b0 |
| children | 28aa76443f58 |
line wrap: on
line diff
--- a/CHANGES.txt Mon Jul 01 20:16:45 2024 -0400 +++ b/CHANGES.txt Sun Jul 07 10:49:40 2024 -0400 @@ -261,6 +261,9 @@ outstanding bugs against the current classhelper using current web features. (Patel Malav, Nikunj Thakkar, Bharath Kanama with integration by John Rouillard) +- disable spellcheck on all password fields to try to prevent + browser from exposing passwords to external servers. (John + Rouillard) 2023-07-13 2.3.0