agent: autocomplete='one-time-code' on OAuth input (argus #592 nit)

Browsers may silently ignore autocomplete='off' on type='password'
inputs (UA override to help users save credentials). For an OAuth
code, the semantic value is 'one-time-code' which is honoured + has
the side benefit of suppressing the 'save password?' prompt that
would otherwise fire on form submit.
This commit is contained in:
iris 2026-05-29 18:40:54 +02:00
commit 944943b7df

View file

@ -360,7 +360,12 @@ window.marked = marked;
type: 'password',
placeholder: 'paste OAuth code here (hidden)',
required: '',
autocomplete: 'off',
// `one-time-code` is the semantic value for OAuth codes (per
// WHATWG / argus #592 review): browsers may silently ignore
// `autocomplete="off"` on `type="password"` inputs, but
// `one-time-code` is honoured + suppresses the "save password
// for this site?" prompt that would otherwise fire on submit.
autocomplete: 'one-time-code',
spellcheck: 'false',
});
const reveal = el('button', {