[wp-trac] [WordPress Trac] #41136: Login forms lacking autocomplete attributes

[WordPress Trac]

#41136: Login forms lacking autocomplete attributes
-------------------------------------+-------------------------------------
 Reporter:  johnjamesjacoby          |       Owner:  joedolson
     Type:  defect (bug)             |      Status:  accepted
 Priority:  normal                   |   Milestone:  6.0
Component:  Login and Registration   |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  needs-patch needs-       |     Focuses:  accessibility,
  testing                            |  administration
-------------------------------------+-------------------------------------
Changes (by joedolson):

 * keywords:  needs-patch => needs-patch needs-testing


Comment:

 New patch sets autocomplete values on:

 - on login username
 - on login password
 - on register username
 - on register email
 - added autocomplete=off to show_blog_form() blog title and blog name
 fields.

 In the login username field in wp-login.php, I used
 `autocomplete='username'`, though the form accepts either username or
 email. Perhaps this should be filterable? To the best of my knowledge,
 `autocomplete="username"` is the appropriate value for a username field
 that accepts an email address.

 I also omitted autocomplete on the 'lost password' form, which also
 accepts either username or email. For the lost password, I'm less certain
 what would be ideal.

 Testing:
 - verify that autocomplete values are present and match data type in any
 log-in or register form.
 - verify whether using autocomplete="username" will produce an email
 address if the user has used their email address as a log-in value.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/41136#comment:15>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform