From efb436250831f94af0ad33d5b3e46c4fadbc26bf Mon Sep 17 00:00:00 2001 From: Prateek Shourya Date: Fri, 9 Jan 2026 14:07:49 +0530 Subject: [PATCH] chore(security): disable autocomplete on sensitive input fields Disable autocomplete on authentication and security-related forms to prevent browsers from storing sensitive credentials. This affects sign-in, password reset, account security, and onboarding forms across admin, web, and space apps. Modified components: - Auth forms (email, password, unique code, forgot/reset/set password) - Account security pages - Instance setup and profile onboarding - Shared UI components (auth-input, password-input) --- apps/admin/app/(all)/(home)/sign-in-form.tsx | 4 ++-- apps/admin/core/components/instance/setup-form.tsx | 5 +++-- .../core/components/account/auth-forms/email.tsx | 2 +- .../core/components/account/auth-forms/password.tsx | 3 ++- .../components/account/auth-forms/unique-code.tsx | 2 ++ .../(settings)/settings/account/security/page.tsx | 3 +++ apps/web/app/(all)/profile/security/page.tsx | 3 +++ .../web/core/components/account/auth-forms/email.tsx | 2 +- .../account/auth-forms/forgot-password.tsx | 2 +- .../core/components/account/auth-forms/password.tsx | 3 ++- .../components/account/auth-forms/reset-password.tsx | 5 +++-- .../components/account/auth-forms/set-password.tsx | 5 +++-- .../components/account/auth-forms/unique-code.tsx | 3 ++- .../components/core/modals/change-email-modal.tsx | 2 ++ .../web/core/components/onboarding/profile-setup.tsx | 3 ++- .../ui/src/auth-form/auth-confirm-password-input.tsx | 12 ++++-------- packages/ui/src/auth-form/auth-input.tsx | 9 +++++---- packages/ui/src/auth-form/auth-password-input.tsx | 9 ++++----- packages/ui/src/auth-form/index.ts | 6 +++--- packages/ui/src/form-fields/input.tsx | 1 - .../ui/src/form-fields/password/password-input.tsx | 11 +++++++---- 21 files changed, 55 insertions(+), 40 deletions(-) diff --git a/apps/admin/app/(all)/(home)/sign-in-form.tsx b/apps/admin/app/(all)/(home)/sign-in-form.tsx index cd40a4c77e8..757127561a3 100644 --- a/apps/admin/app/(all)/(home)/sign-in-form.tsx +++ b/apps/admin/app/(all)/(home)/sign-in-form.tsx @@ -140,7 +140,7 @@ export function InstanceSignInForm() { placeholder="name@company.com" value={formData.email} onChange={(e) => handleFormChange("email", e.target.value)} - autoComplete="on" + autoComplete="off" autoFocus /> @@ -159,7 +159,7 @@ export function InstanceSignInForm() { placeholder="Enter your password" value={formData.password} onChange={(e) => handleFormChange("password", e.target.value)} - autoComplete="on" + autoComplete="off" /> {showPassword ? (