one-time use codes don't need to be remembered by browser

Billy Clark · Billy Clark · commit e061ac49f34a · 2017-11-17T11:23:53.000-05:00
diff --git a/themes/material/mfa/prompt-for-mfa-backupcode.php b/themes/material/mfa/prompt-for-mfa-backupcode.php
@@ -40,8 +40,7 @@
                             <?= $this->t('{material:mfa:backupcode_input}') ?>
                         </label>
                         <input name="mfaSubmission" class="mdl-textfield__input" autofocus
-                               id="mfaSubmission"/>
-<!--                        TODO: don't remember codes here since they are one-time use anyway-->
+                               id="mfaSubmission" autocomplete="off" />
                     </div>
                 </div>
 
diff --git a/themes/material/mfa/prompt-for-mfa-totp.php b/themes/material/mfa/prompt-for-mfa-totp.php
@@ -39,7 +39,7 @@
                             <?= $this->t('{material:mfa:totp_input}') ?>
                         </label>
                         <input name="mfaSubmission" class="mdl-textfield__input" autofocus
-                               id="mfaSubmission"/>
+                               id="mfaSubmission" autocomplete="off" />
                     </div>
                 </div>
 
