web安全漏洞防护

Password type input with autocomplete enabled

The autocomplete attribute works with the following <input> types: text, search, url, tel, email, password, datepickers, range, and color.

The autocomplete attribute specifies whether or not an input field should have autocomplete enabled.

Autocomplete allows the browser to predict the value. When a user starts to type in a field, the browser should display options to fill in the field, based on earlier typed values.

<form action="demo_form.asp" autocomplete="on">
   First name:<input type="text" name="fname"><br>
   Last name: <input type="text" name="lname"><br>
   E-mail: <input type="email" name="email" autocomplete="off"><br>
   <input type="submit">
</form> 

参见：http://www.w3schools.com/tags/att_input_autocomplete.asp

web安全漏洞防护

原文：http://www.cnblogs.com/fenglie/p/4122524.html