From f6a46034abb9494e61222294b26dfbc1249d4741 Mon Sep 17 00:00:00 2001
From: Brandon Roberts <brandon@bxroberts.org>
Date: Tue, 3 Sep 2024 10:47:30 -0700
Subject: [PATCH] Disable autocomplete on password field (#24)

Autocomplete should be disabled so that all the user's passwords aren't kept in the autocomplete cache. I could also see an argument for this even being a `new-password` field, but it can be helpful to see the password.
---
 datasette_auth_passwords/templates/password_tool.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/datasette_auth_passwords/templates/password_tool.html b/datasette_auth_passwords/templates/password_tool.html
index 5a22c60..0749831 100644
--- a/datasette_auth_passwords/templates/password_tool.html
+++ b/datasette_auth_passwords/templates/password_tool.html
@@ -45,7 +45,7 @@ <h1>Password tool</h1>
 
 <form action="/-/password-tool" method="post">
     <div>
-        <input type="text" name="password" style="width: 40%">
+        <input type="text" name="password" style="width: 40%" autocomplete="off">
         <input type="hidden" name="csrftoken" value="{{ csrftoken() }}">
         <input type="submit" value="Create password hash">
     </div>