agent: autocomplete='one-time-code' on OAuth input (argus #592 nit)
Browsers may silently ignore autocomplete='off' on type='password' inputs (UA override to help users save credentials). For an OAuth code, the semantic value is 'one-time-code' which is honoured + has the side benefit of suppressing the 'save password?' prompt that would otherwise fire on form submit.
This commit is contained in:
parent
3b597ea028
commit
944943b7df
1 changed files with 6 additions and 1 deletions
|
|
@ -360,7 +360,12 @@ window.marked = marked;
|
||||||
type: 'password',
|
type: 'password',
|
||||||
placeholder: 'paste OAuth code here (hidden)',
|
placeholder: 'paste OAuth code here (hidden)',
|
||||||
required: '',
|
required: '',
|
||||||
autocomplete: 'off',
|
// `one-time-code` is the semantic value for OAuth codes (per
|
||||||
|
// WHATWG / argus #592 review): browsers may silently ignore
|
||||||
|
// `autocomplete="off"` on `type="password"` inputs, but
|
||||||
|
// `one-time-code` is honoured + suppresses the "save password
|
||||||
|
// for this site?" prompt that would otherwise fire on submit.
|
||||||
|
autocomplete: 'one-time-code',
|
||||||
spellcheck: 'false',
|
spellcheck: 'false',
|
||||||
});
|
});
|
||||||
const reveal = el('button', {
|
const reveal = el('button', {
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue