autocomplete for hidden type #59294
Labels
Comments
|
I guess it's to make sure the field isn't going to be autocomplete, which would make it impossible to submit the form. This attribute was added in 7.2 by 27d8a31. According to Mozilla docs
But also, the spec allows it for a specific use-case.
|
|
@GromNaN the spec allows the |
|
see #59296 |
nicolas-grekas
added a commit
that referenced
this issue
Jan 6, 2025
…lete set to off (xabbuh) This PR was merged into the 7.2 branch. Discussion ---------- [Form] do not render hidden CSRF token forms with autocomplete set to off | Q | A | ------------- | --- | Branch? | 7.2 | Bug fix? | yes | New feature? | no | Deprecations? | no | Issues | Fix #59294 | License | MIT Commits ------- dcf17e6 do not render hidden CSRF token forms with autocomplete set to off
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Symfony version(s) affected
7.2.1
Description
this field is auto-generated by symfony:
<input type="hidden" id="message__token" name="message[_token]" data-controller="csrf-protection" autocomplete="off" value="csrf-token" />this is the error from validator.w3.org:
An input element with a type attribute whose value is hidden must not have an autocomplete attribute whose value is on or off.
How to reproduce
create a simple contact form
Possible Solution
why autocomplete for a hidden field?
Additional Context
No response
The text was updated successfully, but these errors were encountered: