[wp-trac] [WordPress Trac] #62147: Revealed passwords should change back to password type when submitting the form

WordPress Trac noreply at wordpress.org
Thu Mar 27 06:11:35 UTC 2025


#62147: Revealed passwords should change back to password type when submitting the
form
-------------------------------------+-------------------------------------
 Reporter:  jamieburchell            |       Owner:  johnbillion
     Type:  enhancement              |      Status:  reviewing
 Priority:  normal                   |   Milestone:  6.9
Component:  Login and Registration   |     Version:
 Severity:  normal                   |  Resolution:
 Keywords:  good-first-bug has-      |     Focuses:  javascript,
  patch has-screenshots has-         |  administration
  testing-info                       |
-------------------------------------+-------------------------------------

Comment (by devsahadat):

 Thank you for reporting this issue and for the proposed fix.

 I’ve thoroughly reviewed the bug report and analyzed the patch provided in
 PR #8223. The issue stems from password fields remaining in text mode when
 a form is submitted, which could lead to unintended password autofill
 behavior. The proposed fix correctly resets the input type to password
 upon submission, mitigating this risk.

 Testing & Verification

 I have tested the patch in the following scenarios:
         •       Login Page ✅
         •       Add New User Page ✅
         •       Edit User Page ✅

 In all cases, the password field correctly reverts to password upon form
 submission. This aligns with best practices, such as those recommended by
 the UK Government Design System.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62147#comment:16>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list