diff options
| author | David Rothstein <drothstein@gmail.com> | 2013-06-03 18:33:09 -0400 |
|---|---|---|
| committer | David Rothstein <drothstein@gmail.com> | 2013-06-03 18:33:09 -0400 |
| commit | ad00b256bd5a9507f096277fa11016fa55b48a7a (patch) | |
| tree | 7d6e70d17739120fc7d58c5daa74be78e6f4127f /modules/user | |
| parent | 30a95c80f3a1f0259c388f2b07cab171ac9ba223 (diff) | |
| download | brdo-ad00b256bd5a9507f096277fa11016fa55b48a7a.tar.gz brdo-ad00b256bd5a9507f096277fa11016fa55b48a7a.tar.bz2 | |
Issue #787876 by David_Rothstein, zero2one, dcam | avior: Added code comment to clarify why the "autocomplete" attribute is used on the current password field on the user form.
Diffstat (limited to 'modules/user')
| -rw-r--r-- | modules/user/user.module | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/modules/user/user.module b/modules/user/user.module index 1311a28b0..06233fcdf 100644 --- a/modules/user/user.module +++ b/modules/user/user.module @@ -1083,6 +1083,9 @@ function user_account_form(&$form, &$form_state) { '#access' => !empty($protected_values), '#description' => $current_pass_description, '#weight' => -5, + // Do not let web browsers remember this password, since we are trying + // to confirm that the person submitting the form actually knows the + // current one. '#attributes' => array('autocomplete' => 'off'), ); $form['#validate'][] = 'user_validate_current_pass'; |