abhishekbhakat opened a new issue, #24700:
URL: https://github.com/apache/airflow/issues/24700

   ### Description
   
   The form on the login page for Airflow has not set `autocomplete="off"` 
either for the form or the password input field.
   Modern browsers ignore that and offer autocompletion anyway, which some will 
when it detects it is a login form.
   
   ### Use case/motivation
   
   Even though browsers are free to ignore this option. There are a few Airflow 
users reporting this as a vulnerability caught in their scanner. Therefore it 
should be a "good to have".
   
   ### Related issues
   
   _No response_
   
   ### Are you willing to submit a PR?
   
   - [X] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to