• Home
• org.sonarsource.sonar-web-plugin
• sonar-web-plugin
• 2.4
• source code
• S1443.html

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

org.sonar.l10n.web.rules.Web.S1443.html Maven / Gradle / Ivy

Most browsers automatically fill the content of input elements of type 'password' when this password has already been provided in the past.



Imagine that user B takes control of a machine belonging to a user A.
Accessing a secured web site as user A is trivial for user B if form input elements are automatically filled in by the browser on the site's login page.



  Beginning with HTML 5 the ability to turn this functionality off exists on a field-by-field basis using the autocomplete attribute.


Noncompliant Code Example
For HTML5:
<input type="password" />


Compliant Solution
For HTML5:
<input type="password" autocomplete="off" />