Skip to content

Removes autocomplete for fields#4631

Draft
lmac-1 wants to merge 4 commits intomainfrom
1533-autocomplete-removal
Draft

Removes autocomplete for fields#4631
lmac-1 wants to merge 4 commits intomainfrom
1533-autocomplete-removal

Conversation

@lmac-1
Copy link
Copy Markdown
Collaborator

@lmac-1 lmac-1 commented Apr 16, 2026

Description

This PR [adds/changes/fixes]... (A description of your work goes here.)

Closes #__

Validation steps

  1. (How can a reviewer validate your work?)

Additional notes for the reviewer

  1. (Is there anything else the reviewer should know or look out for?)

AI Usage

Please disclose whether you've used AI anywhere in this PR (it's cool, we just
want to know!):

  • I have used Claude Code
  • I have used another model
  • I have not used AI

You can read more details in our
Responsible AI Policy

Pre-submission checklist

  • I have performed an AI review of my code (we recommend using /review
    with Claude Code)
  • I have implemented and tested all related authorization policies.
    (e.g., :owner, :admin, :editor, :viewer)
  • I have updated the changelog.
  • I have ticked a box in "AI usage" in this PR

lmac-1 added 3 commits April 16, 2026 14:25
Add autocomplete as an explicit attr with default "off" on input/1,
input_element/1, and textarea_element/1 in new_inputs.ex instead of
relying on static HTML attributes that can't be overridden. Add
Keyword.put_new(:autocomplete, "off") to password_field/1 and
text_field/1 in form.ex.

Remove now-redundant per-field autocomplete="off" from sandbox
components since the component default handles it.

Add ExUnit tests verifying the default and override behaviour for
both component systems.

Closes #1533
Add explicit autocomplete values to authentication forms so browser
autofill works correctly: email, current-password, new-password,
given-name, family-name, one-time-code on login, registration,
password reset, profile, TOTP/MFA, re-authenticate, first setup,
admin user, and book demo forms.

Add autocomplete="off" to raw <input> tags that bypass shared
components (webhook URL, token display, webhook auth password/API
key inputs).

Use autocomplete="new-password" on non-auth password fields
(credentials, OAuth client ID/secret, webhook auth, Kafka) to
prevent Chrome from autofilling saved passwords — Chrome ignores
"off" on type="password" fields but respects "new-password".
Add autoComplete="off" to shared form components (TextField,
NumberField) and all inline <input> tags across the collaborative
editor and other React files including trigger form, cron builder,
version picker, search inputs, and manual run panel.

Add Vitest tests for TextField and NumberField verifying the
autoComplete attribute is rendered.
@github-project-automation github-project-automation bot moved this to New Issues in Core Apr 16, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Apr 16, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.61%. Comparing base (1d8f156) to head (0091519).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4631      +/-   ##
==========================================
- Coverage   89.63%   89.61%   -0.02%     
==========================================
  Files         444      444              
  Lines       21558    21565       +7     
==========================================
+ Hits        19323    19325       +2     
- Misses       2235     2240       +5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Remove semantically incorrect autocomplete="new-password" from
non-password fields (OAuth Client ID, disabled webhook password display),
simplify json_schema_body_component conditional, remove redundant
autoComplete="off" from ProjectPicker, and fix duplicate autocomplete
attribute in new_inputs.ex code clause.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: New Issues

Development

Successfully merging this pull request may close these issues.

1 participant