Repository navigation
Chrome autofill fills in password on sharelinks with login password #6821
Description
Steps to reproduce
- Save login password for nextcloud to chrome
- Login and create a share link
- Chrome will automatically tick the password field and add your login password
Expected behaviour
Password should be set by the user if they want any
Actual behaviour
Chrome adds the login password as password for the share link
Server configuration
Operating system:
Ubuntu 16.04
Web server:
Apache2
Database:
Mariadb
PHP version:
php7.0
Nextcloud version: (see Nextcloud admin page)
12.0.3
Updated from an older Nextcloud/ownCloud or fresh install:
11.0.3
The solution is to add autocomplete=“new-password” to the password field.
Activity
blizzz commentedon Oct 12, 2017
Browser vendors are going more and more insane with their autocompletion.
did you try this? Mind opening a pull request?
The7thSin commentedon Oct 13, 2017
Nope, still haven't tried it.
Use new-password as autocomplete on share auth page
rullzer commentedon Oct 25, 2017
PR in #6947
stephan-a commentedon Nov 23, 2017
Sorry but I cannot understand why this issue is already closed. When I take a look at the current master, the password input field for a shared link doesn't have the attribute autocomplete="new-password".
The password field in issue #6947 is another one, isn't it?
I have the problem with the password input field when creating a new shared link ("Choose a password for the public link").
Steps to reproduce:
Adding the attribute autocomplete=“new-password” for the password field would fix this issue, too.
rullzer commentedon Nov 23, 2017
@stephan-a aaah I had the wrong field in mind... I'll fix this later
MorrisJobke commentedon Dec 12, 2017
@rullzer Ping
Set autocomplete on share password input
orcas-apisch commentedon Mar 23, 2018
At least as some sort of minimal protection "Share as public link" should not automatically be checked and submitted when there is a (maybe accidently typed) password.