From b119293997fa969e2893ad7959c80bb091ec9b69 Mon Sep 17 00:00:00 2001
From: wangruidong <940853815@qq.com>
Date: Mon, 2 Feb 2026 18:52:03 +0800
Subject: [PATCH] fix: Disable autocomplete for password fields

---
 apps/authentication/templates/authentication/login.html | 6 +++---
 apps/users/templates/users/user_password_verify.html    | 5 +----
 2 files changed, 4 insertions(+), 7 deletions(-)

diff --git a/apps/authentication/templates/authentication/login.html b/apps/authentication/templates/authentication/login.html
index 2f1ade0af..dd69d6cd6 100644
--- a/apps/authentication/templates/authentication/login.html
+++ b/apps/authentication/templates/authentication/login.html
@@ -352,7 +352,7 @@
                 </ul>
             </div>
             <div class="contact-form col-md-10 col-md-offset-1" style='float: none; overflow: hidden'>
-                <form id="login-form" action="" method="post" role="form" novalidate="novalidate">
+                <form id="login-form" autocomplete="off" action="" method="post" role="form" novalidate="novalidate">
                     {% csrf_token %}
                     <div style="line-height: 17px;margin-bottom: 20px;color: #999999;">
                         {% if form.non_field_errors %}
@@ -362,9 +362,9 @@
                         {% endif %}
                     </div>
 
-                    {% bootstrap_field form.username show_label=False %}
+                    {% bootstrap_field form.username autocomplete="off" show_label=False %}
                     <div class="form-group {% if form.password.errors %} has-error {% endif %}">
-                        <input type="password" class="form-control" id="password" placeholder="{% trans 'Password' %}"
+                        <input type="password" autocomplete="off" class="form-control" id="password" placeholder="{% trans 'Password' %}"
                                required>
                         <input id="password-hidden" type="text" style="display:none"
                                name="{{ form.password.html_name }}">
diff --git a/apps/users/templates/users/user_password_verify.html b/apps/users/templates/users/user_password_verify.html
index 65dacc75d..708b75819 100644
--- a/apps/users/templates/users/user_password_verify.html
+++ b/apps/users/templates/users/user_password_verify.html
@@ -15,7 +15,7 @@
         {% endif %}
         {% csrf_token %}
         <div class="form-input form-group">
-            <input type="password" id="password" class="form-control" name="{{ form.password.html_name }}" placeholder="{% trans 'Password' %}" required="">
+            <input type="password" id="password" autocomplete="off" class="form-control" name="{{ form.password.html_name }}" placeholder="{% trans 'Password' %}" required="">
         </div>
         <button type="submit" class="btn btn-primary">{% trans 'Confirm' %}</button>
     </form>
@@ -32,6 +32,3 @@
         });
     </script>
 {% endblock %}
-
-
-