Merge pull request dokuwiki#4364 from dokuwiki/nopassfill

Preventing auto-filling of passwords in config dokuwiki#4362

Author: splitbrain

lib/plugins/config/admin.php

@@ -91,7 +91,7 @@ public function html()
         // POST to script() instead of wl($ID) so config manager still works if
         // rewrite config is broken. Add $ID as hidden field to remember
         // current ID in most cases.
-        echo '<form id="dw__configform" action="' . script() . '" method="post">';
+        echo '<form id="dw__configform" action="' . script() . '" method="post" autocomplete="off">';
         echo '<div class="no"><input type="hidden" name="id" value="' . $ID . '" /></div>';
         formSecurityToken();
         $this->printH1('dokuwiki_settings', $this->getLang('_header_dokuwiki'));

lib/plugins/config/core/Setting/SettingPassword.php

@@ -35,7 +35,7 @@ public function html(\admin_plugin_config $plugin, $echo = false)
 
         $label = '<label for="config___' . $key . '">' . $this->prompt($plugin) . '</label>';
         $input = '<input id="config___' . $key . '" name="config[' . $key .
-            ']" autocomplete="off" type="password" class="edit" value="" ' . $disable . ' />';
+            ']" autocomplete="new-password" type="password" class="edit" value="" ' . $disable . ' />';
         return [$label, $input];
     }
 }