plane
plane copied to clipboard
chore(security): disable autocomplete on sensitive input fields
Description
Disable autocomplete on authentication and security-related forms to prevent browsers from storing sensitive credentials. This affects sign-in, password reset, account security, and onboarding forms across admin, web, and space apps.
Modified components:
- Auth forms (email, password, unique code, forgot/reset/set password)
- Account security pages
- Instance setup and profile onboarding
- Shared UI components (auth-input, password-input)
Type of Change
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] Feature (non-breaking change which adds functionality)
- [ ] Improvement (change that would cause existing functionality to not work as expected)
- [ ] Code refactoring
- [ ] Performance improvements
- [ ] Documentation update
Screenshots and Media (if applicable)
Test Scenarios
References
Summary by CodeRabbit
-
New Features
- Authentication input fields now support configurable autocomplete behavior so apps can control browser autofill hints.
-
Bug Fixes
- Standardized and updated autocomplete hints across sign-in, registration, password reset, and account security flows to reduce unwanted autofill and improve password manager compatibility.
✏️ Tip: You can customize this high-level summary in your review settings.