From c6e6b1fe78fb9bbbf614fca47f572a24dd066a68 Mon Sep 17 00:00:00 2001
From: Wikinaut <mail@wikinaut.de>
Date: Wed, 26 Oct 2016 02:36:38 +0200
Subject: [PATCH] suppress autocompletion of password input field

* fix #118
* increased the password input field to fit the "Password (recommended)" text
---
 tpl/bootstrap.php | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/tpl/bootstrap.php b/tpl/bootstrap.php
index 5615090..e3ba6ed 100644
--- a/tpl/bootstrap.php
+++ b/tpl/bootstrap.php
@@ -159,7 +159,16 @@ if ($PASSWORD):
 ?>
 					<li>
 						<div id="password" class="navbar-form hidden">
-							<input type="password" id="passwordinput" placeholder="<?php echo I18n::_('Password (recommended)'); ?>" class="form-control" size="19" />
+
+							<!-- The following form element glues pseudo-login data together, so that password managers can try to look up stored value pairs.
+							     The username field is made hidden, because I found that otherwise password managers will fill in data into the password field.
+							     See https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields
+							-->
+
+							<form>
+								<input type="text" name="username" class="hidden" />
+								<input type="password" id="passwordinput" placeholder="<?php echo I18n::_('Password (recommended)'); ?>" class="form-control" size="20" />
+							</form>
 						</div>
 					</li>
 <?php