Secure phx.gen.auth forms against PII leakage

priv/templates/phx.gen.auth/login_live.ex

@@ -48,6 +48,7 @@ defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web
             type="email"
             label="Email"
             autocomplete="email"
+            spellcheck="false"
             required
             phx-mounted={JS.focus()}
           />
@@ -72,13 +73,15 @@ defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web
             type="email"
             label="Email"
             autocomplete="email"
+            spellcheck="false"
             required
           />
           <.input
             field={@form[:password]}
             type="password"
             label="Password"
             autocomplete="current-password"
+            spellcheck="false"
           />
           <.button class="btn btn-primary w-full" name={@form[:remember_me].name} value="true">
             Log in and stay logged in <span aria-hidden="true">→</span>

priv/templates/phx.gen.auth/registration_live.ex

@@ -28,6 +28,7 @@ defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web
             type="email"
             label="Email"
             autocomplete="username"
+            spellcheck="false"
             required
             phx-mounted={JS.focus()}
           />

priv/templates/phx.gen.auth/registration_new.html.heex

@@ -19,6 +19,7 @@
         type="email"
         label="Email"
         autocomplete="email"
+        spellcheck="false"
         required
         phx-mounted={JS.focus()}
       />

priv/templates/phx.gen.auth/session_new.html.heex

@@ -34,6 +34,7 @@
         type="email"
         label="Email"
         autocomplete="email"
+        spellcheck="false"
         required
         phx-mounted={JS.focus()}
       />
@@ -51,13 +52,15 @@
         type="email"
         label="Email"
         autocomplete="email"
+        spellcheck="false"
         required
       />
       <.input
         field={f[:password]}
         type="password"
         label="Password"
         autocomplete="current-password"
+        spellcheck="false"
       />
       <.button class="btn btn-primary w-full" name={@form[:remember_me].name} value="true">
         Log in and stay logged in <span aria-hidden="true">→</span>

priv/templates/phx.gen.auth/settings_edit.html.heex

@@ -9,7 +9,14 @@
   <.form :let={f} for={@email_changeset} action={~p"<%= schema.route_prefix %>/settings"} id="update_email">
     <input type="hidden" name="action" value="update_email" />
 
-    <.input field={f[:email]} type="email" label="Email" autocomplete="email" required />
+    <.input
+      field={f[:email]}
+      type="email"
+      label="Email"
+      autocomplete="email"
+      spellcheck="false"
+      required
+    />
 
     <.button variant="primary" phx-disable-with="Changing...">Change Email</.button>
   </.form>
@@ -24,13 +31,15 @@
       type="password"
       label="New password"
       autocomplete="new-password"
+      spellcheck="false"
       required
     />
     <.input
       field={f[:password_confirmation]}
       type="password"
       label="Confirm new password"
       autocomplete="new-password"
+      spellcheck="false"
       required
     />
     <.button variant="primary" phx-disable-with="Changing...">

priv/templates/phx.gen.auth/settings_live.ex

@@ -22,6 +22,7 @@ defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web
           type="email"
           label="Email"
           autocomplete="username"
+          spellcheck="false"
           required
         />
         <.button variant="primary" phx-disable-with="Changing...">Change Email</.button>
@@ -42,20 +43,23 @@ defmodule <%= inspect context.web_module %>.<%= inspect Module.concat(schema.web
           name={@password_form[:email].name}
           type="hidden"
           id="hidden_<%= schema.singular %>_email"
+          spellcheck="false"
           value={@current_email}
         />
         <.input
           field={@password_form[:password]}
           type="password"
           label="New password"
           autocomplete="new-password"
+          spellcheck="false"
           required
         />
         <.input
           field={@password_form[:password_confirmation]}
           type="password"
           label="Confirm new password"
           autocomplete="new-password"
+          spellcheck="false"
         />
         <.button variant="primary" phx-disable-with="Saving...">
           Save Password