|
View:
New views
9 Messages
—
Rating Filter:
Alert me
|
|
|
Feature request - autocomplete="off"I'd like to feature request the ability to have autocomplete
turned off on either individual text inputs or the form. This adds security on shared or public computers by preventing a subsequent user from going into the browser history and selecting a username from an autocomplete list. I thought I would modify form.inc myself, but realized I was getting in over my head. It looks like for just <form>, I would need to: * declare an instance variable * include a description of -autocompleteoff in the custom tag * add -optional='autocompleteoff', to the ctag's list of params * set a default value for autocompleteoff to false * add this bit: (self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"'; Is that about right? --steve -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Steve Piercy Web Site Builder Soquel, CA <web@...> <http://www.StevePiercy.com/> -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"Sounds about right.
For now you can use the -raw parameter to inject that code, but would be nice to have as an option. At 01.38 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote: >I'd like to feature request the ability to have autocomplete turned off on either individual text inputs or the form. This adds security on shared or public computers by preventing a subsequent user from going into the browser history and selecting a username from an autocomplete list. > >I thought I would modify form.inc myself, but realized I was getting in over my head. It looks like for just <form>, I would need to: > >* declare an instance variable >* include a description of -autocompleteoff in the custom tag >* add -optional='autocompleteoff', to the ctag's list of params >* set a default value for autocompleteoff to false >* add this bit: >(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"'; > >Is that about right? > >--steve > >-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- >Steve Piercy Web Site Builder >Soquel, CA ><web@...> <http://www.StevePiercy.com/> > > >-- >############################################################# >This message is sent to you because you are subscribed to >the mailing list <knop@...>. >To unsubscribe, E-mail to: <knop-off@...> >Send administrative queries to <knop-request@...> >List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html >Project homepage http://montania.se/projects/knop/ >Google Code has the latest downloads at http://code.google.com/p/knop/ -- Johan Sölve [FSA Member, Lasso Partner] Web Application/Lasso/FileMaker Developer MONTANIA SOFTWARE & SOLUTIONS http://www.montania.se mailto:joh-n@... (spam-safe email address, replace '-' with 'a') -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"Steve Piercy - Web Site Builder wrote:
> (self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"'; > > Is that about right? I'm fairly sure autocompleteoff="off" isn't XHTML compliant, so you might have to watch out there. Adam -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"On 10/16/09 at 10:32 AM, lists@... (Adam de Zoete) pronounced:
>Steve Piercy - Web Site Builder wrote: >>(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"'; >> >>Is that about right? > >I'm fairly sure autocompleteoff="off" isn't XHTML compliant, so >you might have to watch out there. It doesn't validate for HTML 4.01 Transitional either. http://validator.w3.org/#validate_by_input: ------------ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html lang="en"> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <title>Untitled</title> </head> <body> <form action="foo" method="post" autocomplete="off"> </form> </body> </html> ------------ However many institutions require its use, and I completely agree with its use in certain contexts. Another use is on a credit card number field. Or the activation code for a nuclear weapon. It looks like it will be defined in HTML5: http://www.w3.org/TR/html5/forms.html#the-autocomplete-attribute --steve -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Steve Piercy Web Site Builder Soquel, CA <web@...> <http://www.StevePiercy.com/> -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"Okay, I'll have a go at the <form> bit tomorrow and submit
changes for your review. The inputs will require a bit more thought and care. I realized it would need to be applied to inputs of type text and password, and possibly others. --steve On 10/16/09 at 11:31 AM, inbox_js@... (Johan Solve) pronounced: >Sounds about right. > >For now you can use the -raw parameter to inject that code, but >would be nice to have as an option. > > >At 01.38 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote: >>I'd like to feature request the ability to have autocomplete turned off on either >individual text inputs or the form. This adds security on >shared or public computers by preventing a subsequent user from >going into the browser history and selecting a username from an >autocomplete list. >> >>I thought I would modify form.inc myself, but realized I was getting in over my >head. It looks like for just <form>, I would need to: >> >>* declare an instance variable >>* include a description of -autocompleteoff in the custom tag >>* add -optional='autocompleteoff', to the ctag's list of params >>* set a default value for autocompleteoff to false >>* add this bit: >>(self -> 'autocompleteoff') ? #output += ' autocompleteoff="off"'; >> >>Is that about right? >> >>--steve >> >>-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- >>Steve Piercy Web Site Builder >>Soquel, CA >><web@...> <http://www.StevePiercy.com/> >> >> >>-- >>############################################################# >>This message is sent to you because you are subscribed to >>the mailing list <knop@...>. >>To unsubscribe, E-mail to: <knop-off@...> >>Send administrative queries to <knop-request@...> >>List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html >>Project homepage http://montania.se/projects/knop/ >>Google Code has the latest downloads at http://code.google.com/p/knop/ > > >-- >Johan Sölve [FSA Member, Lasso Partner] >Web Application/Lasso/FileMaker Developer >MONTANIA SOFTWARE & SOLUTIONS >http://www.montania.se mailto:joh-n@... >(spam-safe email address, replace '-' with 'a') > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Steve Piercy Web Site Builder Soquel, CA <web@...> <http://www.StevePiercy.com/> -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"At 03.31 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote:
>It doesn't validate for HTML 4.01 Transitional either. Oh. Can you live with handling it with -raw? -- Johan Sölve [FSA Member, Lasso Partner] Web Application/Lasso/FileMaker Developer MONTANIA SOFTWARE & SOLUTIONS http://www.montania.se mailto:joh-n@... (spam-safe email address, replace '-' with 'a') -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"On 10/16/09 at 12:36 PM, inbox_js@... (Johan Solve) pronounced:
>At 03.31 -0700 2009-10-16, Steve Piercy - Web Site Builder wrote: >>It doesn't validate for HTML 4.01 Transitional either. > > >Oh. Can you live with handling it with -raw? Yeah, you're right, I think -raw makes more sense to use, given that HTML5 is not yet finalized. (plus it is a lot less work) ;) --steve -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Steve Piercy Web Site Builder Soquel, CA <web@...> <http://www.StevePiercy.com/> -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"Steve Piercy - Web Site Builder wrote on 10/16/2009 5:31 AM:
> It looks like it will be defined in HTML5: > http://www.w3.org/TR/html5/forms.html#the-autocomplete-attribute It is defined in HTML5, which is doing it's best to create a HTML spec that reflects how browsers actually work. That is what I suggest you target as that is what all the browser vendors are targeting as well. - Bil -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
|
|
Re: Feature request - autocomplete="off"On 10/16/09 at 8:34 AM, bil@... (Bil Corry) pronounced:
>Steve Piercy - Web Site Builder wrote on 10/16/2009 5:31 AM: >>It looks like it will be defined in HTML5: >>http://www.w3.org/TR/html5/forms.html#the-autocomplete-attribute > >It is defined in HTML5, which is doing it's best to create a >HTML spec that reflects how browsers actually work. That is >what I suggest you target as that is what all the browser >vendors are targeting as well. LOL. Okay, so it's back on the table. Dunno if I can grab it back from the dog. I'll work on the <form> bit tomorrow. --steve -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Steve Piercy Web Site Builder Soquel, CA <web@...> <http://www.StevePiercy.com/> -- ############################################################# This message is sent to you because you are subscribed to the mailing list <knop@...>. To unsubscribe, E-mail to: <knop-off@...> Send administrative queries to <knop-request@...> List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html Project homepage http://montania.se/projects/knop/ Google Code has the latest downloads at http://code.google.com/p/knop/ |
| Free embeddable forum powered by Nabble | Forum Help |