From 729eccc81a8ee7968c2e6a7d660e62d9cd88ec73 Mon Sep 17 00:00:00 2001
From: Andrew Backeby <andrew@backeby.eu>
Date: Tue, 11 May 2021 17:29:04 +0200
Subject: [PATCH] Disable autocomplete for passwords (#12851)

Certain vulnerability scanners (Nexpose in my case) will get this "template" page with curl and see that you can autocomplete the password field. This change should disable it.
---
 resources/views/auth/login-form.blade.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/resources/views/auth/login-form.blade.php b/resources/views/auth/login-form.blade.php
index 9879c5d572..7ab60f2bac 100644
--- a/resources/views/auth/login-form.blade.php
+++ b/resources/views/auth/login-form.blade.php
@@ -24,7 +24,7 @@
             </div>
             <div class="form-group{{ $errors->has('password') ? ' has-error' : '' }}">
                 <div class="col-md-12">
-                    <input type="password" name="password" id="password" class="form-control" placeholder="@lang('Password')" />
+                    <input type="password" name="password" id="password" autocomplete="off" class="form-control" placeholder="@lang('Password')" />
                     @if ($errors->has('password'))
                         <span class="help-block">
                                     <strong>{{ $errors->first('password') }}</strong>