[wp-trac] [WordPress Trac] #62147: Revealed passwords should change back to password type when submitting the form
WordPress Trac
noreply at wordpress.org
Thu Mar 27 06:11:35 UTC 2025
#62147: Revealed passwords should change back to password type when submitting the
form
-------------------------------------+-------------------------------------
Reporter: jamieburchell | Owner: johnbillion
Type: enhancement | Status: reviewing
Priority: normal | Milestone: 6.9
Component: Login and Registration | Version:
Severity: normal | Resolution:
Keywords: good-first-bug has- | Focuses: javascript,
patch has-screenshots has- | administration
testing-info |
-------------------------------------+-------------------------------------
Comment (by devsahadat):
Thank you for reporting this issue and for the proposed fix.
I’ve thoroughly reviewed the bug report and analyzed the patch provided in
PR #8223. The issue stems from password fields remaining in text mode when
a form is submitted, which could lead to unintended password autofill
behavior. The proposed fix correctly resets the input type to password
upon submission, mitigating this risk.
Testing & Verification
I have tested the patch in the following scenarios:
• Login Page ✅
• Add New User Page ✅
• Edit User Page ✅
In all cases, the password field correctly reverts to password upon form
submission. This aligns with best practices, such as those recommended by
the UK Government Design System.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/62147#comment:16>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list