All Collections
Rule documentation
Vulnerability protection
No autocompletion on password fields
No autocompletion on password fields

Detect any password fields with autocompletion enabled.

Gabriele Gallo Stampino avatar
Written by Gabriele Gallo Stampino
Updated over a week ago

Rationale

The user browser can save and remember the entered values for user input fields with autocomplete-enabled attributes. This might reveal sensitive information like passwords, especially on public and multi-user computers.

Scope

  • Visualforce pages

Did this answer your question?