From d4fba307f7714924ef79789a4b327d783959fcbf Mon Sep 17 00:00:00 2001
From: Simon Hieu Mai <hieu.mai@mnsu.edu>
Date: Wed, 19 Dec 2012 14:33:54 -0600
Subject: [PATCH] LP#1088561: remove current password (renew password issue
 with TPAC)

If a user chooses to have their browser remember their password for the
catalog, it can fill in the password to the change password form page
as hidden dots. This behavior was observed specifically with Firefox.

Instead, add autocomplete="off" attribute to the form to force users to
enter existing password to change to a new password as intended.

Signed-off-by: Simon Mai <hieu.mai@mnsu.edu>
Signed-off-by: Ben Shum <bshum@biblio.org>
---
 Open-ILS/src/templates/opac/myopac/update_password.tt2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Open-ILS/src/templates/opac/myopac/update_password.tt2 b/Open-ILS/src/templates/opac/myopac/update_password.tt2
index c87fc5d71f..0d3d461b17 100644
--- a/Open-ILS/src/templates/opac/myopac/update_password.tt2
+++ b/Open-ILS/src/templates/opac/myopac/update_password.tt2
@@ -21,7 +21,7 @@
     </div>
 [% END %]
 
-<form method='POST' id='account-update-email'> 
+<form method='POST' id='account-update-email' autocomplete="off">
     <table> 
         <tr><td>[% l('Current Password') %]</td><td><input type='password' name='current_pw'/></td></tr>
         <tr><td>[% l('New Password') %]</td><td><input type='password' name='new_pw'/></td></tr>
-- 
2.11.0