Skip to content

Replace autocomplete="off" with autocomplete="one-time-code" on auth #332

Open
@JamesFX2

Description

Hi,

https://web.dev/sms-otp-form/ recommends that autocomplete="off" is replaced with autocomplete="one-time-code" so that the browser doesn't ask the user if they want to replace their current password with the autocomplete.

See also https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete#values

For example,

https://github.com/magento/security-package/blob/develop/TwoFactorAuth/view/adminhtml/web/template/google/auth.html#L25

Can submit a PR myself with "fixes" if requested.

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions