All Downloads are FREE. Search and download functionalities are using the official Maven repository.

org.sonar.l10n.web.rules.Web.S1443.html Maven / Gradle / Ivy

Go to download

Analyze HTML (also within PHP/Ruby/etc. templates) and JSP/JSF code.

The newest version!

Most browsers automatically fill the content of input elements of type 'password' when this password has already been provided in the past.

Imagine that user B takes control of a machine belonging to a user A. Accessing a secured web site as user A is trivial for user B if form input elements are automatically filled in by the browser on the site's login page.

Noncompliant Code Example

For HTML5:

<input type="password" />

Compliant Solution

For HTML5:

<input type="password" autocomplete="off" />




© 2015 - 2024 Weber Informatics LLC | Privacy Policy