Disable password autofill entirely with configuration flag #10651

New Issue

GiteaMirror · 2025-11-02T09:14:21-06:00

GiteaMirror commented

2025-11-02 09:14:21 -06:00

Originally created by @brodeuralexis on GitHub (Apr 13, 2023).

Feature Description

Gitea should expose a configuration flag like PASSWORD_AUTOFILL in the security section to prevent autofilling of password fields throughout the application. This means that every input[type="password"] element will receive or modify its autocomplete attribute to be "off".

While an extreme security measure and not an issue with Gitea itself, it is sometimes required by companies, as all passwords saved by the browser can be leaked if the computer is compromised, or if the computer is shared by multiple people.

Screenshots

No response

Originally created by @brodeuralexis on GitHub (Apr 13, 2023). ### Feature Description Gitea should expose a configuration flag like `PASSWORD_AUTOFILL` in the *security* section to prevent autofilling of password fields throughout the application. This means that every `input[type="password"]` element will receive or modify its `autocomplete` attribute to be `"off"`. While an extreme security measure and not an issue with Gitea itself, it is sometimes required by companies, as all passwords saved by the browser can be leaked if the computer is compromised, or if the computer is shared by multiple people. ### Screenshots _No response_

GiteaMirror added the type/proposal type/feature labels 2025-11-02 09:14:21 -06:00

GiteaMirror closed this issue

2025-11-02 09:14:22 -06:00

GiteaMirror commented

2025-11-02 09:14:23 -06:00

@wxiaoguang commented on GitHub (Apr 14, 2023):

It doesn't work .......... Chrome does bad on this problem.

There are a lot of comments here: https://github.com/go-gitea/gitea/blob/main/templates/base/disable_form_autofill.tmpl

If the autocomplete=off works for you, welcome to share your experience.

@wxiaoguang commented on GitHub (Apr 14, 2023): It doesn't work .......... Chrome does bad on this problem. There are a lot of comments here: https://github.com/go-gitea/gitea/blob/main/templates/base/disable_form_autofill.tmpl If the `autocomplete=off` works for you, welcome to share your experience.

GiteaMirror commented

2025-11-02 09:14:23 -06:00

@MikeyG731 commented on GitHub (Jun 25, 2023):

In a situation where this is being required by the company. Hopefully this gains some traction.

@MikeyG731 commented on GitHub (Jun 25, 2023): In a situation where this is being required by the company. Hopefully this gains some traction.

GiteaMirror commented

2025-11-02 09:14:23 -06:00

@techknowlogick commented on GitHub (Jun 25, 2023):

Thanks for opening this ticket, as @wxiaoguang this isn't really achievable via front end. I suggest you look into group policies to disable. I'll close this now.

@techknowlogick commented on GitHub (Jun 25, 2023): Thanks for opening this ticket, as @wxiaoguang this isn't really achievable via front end. I suggest you look into group policies to disable. I'll close this now.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#10651