11/19/2023 0 Comments Runjs autocompleteIf you want to stop bots/spammers use captcha. Ultimately if you want to assure data quality then use data or format validation, or verification (e.g. email addresses) and often for vaporous reasons like "Improve Data Quality," "Stop Spammers/Bots," and "Make sure the user enters the right data in the right box." There's very few occasions when autocomplete being disabled makes sense, the vast majority are just developers dumping it in there because they want to make doubly-sure the user actually entered a field by hand (e.g. I'm going to side with the Chrome team on this one. So it was a design choice: the Docs team decided that giving users all these other right click actions was more important than allowing the user to right click to copy/paste without an extension (since most people use the keyboard shortcuts anyway). Because docs shows a custom menu on right click, the browser will not expose the default menu, and without the default menu, there's no JS copy/paste event.īrowser extensions have more access, and that's why a browser extension re-enables the functionality. Think about it - do you want any website to just read everything off your clipboard?ĭocs overrides right click because there's things you'd naturally want to do in a word processor with right click (format, link, comment, etc). On the other hand, if you use ctrl+C or ctrl+V, the website gets access to the clipboard, because it's a JS clipboard event. Browsers restrict access to the clipboard on general user actions (like click, right click, etc). Google Docs did this for a specific reason. This should satisfy everyone and avoid situations like the one described above where the user sees arbitrary and incorrect values being filled in a form which is not related to their user and is not a login form. Personally I think the browser should give the user control, but autocomplete should not be the default if the website requests it to be off, it should be available on right click or with some easily accessible option. It's nice if the website can somehow fix this by saying they really don't want autocomplete on a form to edit other users. I've seen this on real sites and had users complain about it, it is a very real issue, and unfortunately not all admin users are savvy enough to turn off autocomplete in just one instance, when they use it all the time elsewhere (even on the same website). There was no mechanism to tell chrome not to do this if autocomplete=off is ignored, but you can set autocomplete to an arbitrary value (say =nope not =off as in spec) and it will not autocomplete. The admin visits a page to edit a normal user on their website, which contains fields like email/password etc for that other user.Ĭhrome autocompletes the admin user's password and email in the form fields without user interaction.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |