Feature request - autocomplete="off"

View: New views
9 Messages — Rating Filter:   Alert me  

Feature request - autocomplete="off"

by Steve Piercy :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I'd like to feature request the ability to have autocomplete
turned off on either individual text inputs or the form.  This
adds security on shared or public computers by preventing a
subsequent user from going into the browser history and
selecting a username from an autocomplete list.

I thought I would modify form.inc myself, but realized I was
getting in over my head.  It looks like for just <form>, I would
need to:

* declare an instance variable
* include a description of -autocompleteoff in the custom tag
* add -optional='autocompleteoff', to the ctag's list of params
* set a default value for autocompleteoff to false
* add this bit:
(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"';

Is that about right?

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Johan Solve-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Sounds about right.

For now you can use the -raw parameter to inject that code, but would be nice to have as an option.


At 01.38 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote:

>I'd like to feature request the ability to have autocomplete turned off on either individual text inputs or the form.  This adds security on shared or public computers by preventing a subsequent user from going into the browser history and selecting a username from an autocomplete list.
>
>I thought I would modify form.inc myself, but realized I was getting in over my head.  It looks like for just <form>, I would need to:
>
>* declare an instance variable
>* include a description of -autocompleteoff in the custom tag
>* add -optional='autocompleteoff', to the ctag's list of params
>* set a default value for autocompleteoff to false
>* add this bit:
>(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"';
>
>Is that about right?
>
>--steve
>
>-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>Steve Piercy               Web Site Builder
>Soquel, CA
><web@...>                  <http://www.StevePiercy.com/>
>
>
>--
>#############################################################
>This message is sent to you because you are subscribed to
>the mailing list <knop@...>.
>To unsubscribe, E-mail to: <knop-off@...>
>Send administrative queries to  <knop-request@...>
>List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
>Project homepage http://montania.se/projects/knop/
>Google Code has the latest downloads at http://code.google.com/p/knop/


--
     Johan Sölve    [FSA Member, Lasso Partner]
     Web Application/Lasso/FileMaker Developer
     MONTANIA SOFTWARE & SOLUTIONS
http://www.montania.se   mailto:joh-n@...
 (spam-safe email address, replace '-' with 'a')

--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Adam de Zoete-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Steve Piercy - Web Site Builder wrote:
> (self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"';
>
> Is that about right?

I'm fairly sure autocompleteoff="off" isn't XHTML compliant, so you
might have to watch out there.

Adam

--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Steve Piercy :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On 10/16/09 at 10:32 AM, lists@... (Adam de Zoete) pronounced:

>Steve Piercy - Web Site Builder wrote:
>>(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"';
>>
>>Is that about right?
>
>I'm fairly sure autocompleteoff="off" isn't XHTML compliant, so
>you might have to watch out there.

It doesn't validate for HTML 4.01 Transitional either.

http://validator.w3.org/#validate_by_input:

------------

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
         "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en">
<head>
     <meta http-equiv="content-type" content="text/html; charset=utf-8">
     <title>Untitled</title>
</head>
<body>
<form action="foo" method="post" autocomplete="off">

</form>
</body>
</html>

------------

However many institutions require its use, and I completely
agree with its use in certain contexts.  Another use is on a
credit card number field.  Or the activation code for a nuclear weapon.

It looks like it will be defined in HTML5:
http://www.w3.org/TR/html5/forms.html#the-autocomplete-attribute

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Steve Piercy :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Okay, I'll have a go at the <form> bit tomorrow and submit
changes for your review.

The inputs will require a bit more thought and care.  I realized
it would need to be applied to inputs of type text and password,
and possibly others.

--steve


On 10/16/09 at 11:31 AM, inbox_js@... (Johan Solve) pronounced:

>Sounds about right.
>
>For now you can use the -raw parameter to inject that code, but
>would be nice to have as an option.
>
>
>At 01.38 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote:
>>I'd like to feature request the ability to have autocomplete turned off on either
>individual text inputs or the form.  This adds security on
>shared or public computers by preventing a subsequent user from
>going into the browser history and selecting a username from an
>autocomplete list.
>>
>>I thought I would modify form.inc myself, but realized I was getting in over my
>head.  It looks like for just <form>, I would need to:
>>
>>* declare an instance variable
>>* include a description of -autocompleteoff in the custom tag
>>* add -optional='autocompleteoff', to the ctag's list of params
>>* set a default value for autocompleteoff to false
>>* add this bit:
>>(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"';
>>
>>Is that about right?
>>
>>--steve
>>
>>-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>Steve Piercy               Web Site Builder
>>Soquel, CA
>><web@...>                  <http://www.StevePiercy.com/>
>>
>>
>>--
>>#############################################################
>>This message is sent to you because you are subscribed to
>>the mailing list <knop@...>.
>>To unsubscribe, E-mail to: <knop-off@...>
>>Send administrative queries to  <knop-request@...>
>>List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
>>Project homepage http://montania.se/projects/knop/
>>Google Code has the latest downloads at http://code.google.com/p/knop/
>
>
>--
>Johan Sölve    [FSA Member, Lasso Partner]
>Web Application/Lasso/FileMaker Developer
>MONTANIA SOFTWARE & SOLUTIONS
>http://www.montania.se   mailto:joh-n@...
>(spam-safe email address, replace '-' with 'a')
>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Johan Solve-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

At 03.31 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote:
>It doesn't validate for HTML 4.01 Transitional either.


Oh. Can you live with handling it with -raw?
--
     Johan Sölve    [FSA Member, Lasso Partner]
     Web Application/Lasso/FileMaker Developer
     MONTANIA SOFTWARE & SOLUTIONS
http://www.montania.se   mailto:joh-n@...
 (spam-safe email address, replace '-' with 'a')

--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Steve Piercy :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On 10/16/09 at 12:36 PM, inbox_js@... (Johan Solve) pronounced:

>At 03.31 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote:
>>It doesn't validate for HTML 4.01 Transitional either.
>
>
>Oh. Can you live with handling it with -raw?

Yeah, you're right, I think -raw makes more sense to use, given
that HTML5 is not yet finalized.  (plus it is a lot less work)  ;)

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by bilcorry :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Steve Piercy - Web Site Builder wrote on 10/16/2009 5:31 AM:
> It looks like it will be defined in HTML5:
> http://www.w3.org/TR/html5/forms.html#the-autocomplete-attribute

It is defined in HTML5, which is doing it's best to create a HTML spec that reflects how browsers actually work.  That is what I suggest you target as that is what all the browser vendors are targeting as well.


- Bil


--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/

Re: Feature request - autocomplete="off"

by Steve Piercy :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On 10/16/09 at 8:34 AM, bil@... (Bil Corry) pronounced:

>Steve Piercy - Web Site Builder wrote on 10/16/2009 5:31 AM:
>>It looks like it will be defined in HTML5:
>>http://www.w3.org/TR/html5/forms.html#the-autocomplete-attribute
>
>It is defined in HTML5, which is doing it's best to create a
>HTML spec that reflects how browsers actually work.  That is
>what I suggest you target as that is what all the browser
>vendors are targeting as well.

LOL.  Okay, so it's back on the table.  Dunno if I can grab it
back from the dog.

I'll work on the <form> bit tomorrow.

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@...>.
To unsubscribe, E-mail to: <knop-off@...>
Send administrative queries to  <knop-request@...>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/