[wp-trac] [WordPress Trac] #41136: Login forms lacking autocomplete attributes

[WordPress Trac]

#41136: Login forms lacking autocomplete attributes
-----------------------------+-------------------------------------
 Reporter:  johnjamesjacoby  |      Owner:
     Type:  defect (bug)     |     Status:  new
 Priority:  normal           |  Milestone:  Awaiting Review
Component:  Users            |    Version:
 Severity:  normal           |   Keywords:  needs-patch ux-feedback
  Focuses:                   |
-----------------------------+-------------------------------------
 The security team received a report via HackerOne related to
 `autocomplete` attributes being omitted from various form fields in `wp-
 login.php`. Since there is no direct security issue (and we've handled
 this type of improvement publicly previously) I'm creating a new ticket
 here to continue that.

 In my research, form fields in `wp_login_form()`, `show_user_form()`, and
 `show_blog_form()` need similar scrutiny and improvements.

 Related: https://core.trac.wordpress.org/ticket/24364

--
Ticket URL: <https://core.trac.wordpress.org/ticket/41136>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform