Question

It happens in Django Admin, but I assume it’s a browser’s behavior (though it happens, at least, in Chrome and Firefox):

When a user saves his credentials in browser, it autopopulates the login form. This is ok. But it also autopopulates the user creation form, filling the username and password fields. As it happens in Django Admin, I think I can change the template field names, but then I have to change the user creation workflow and that’s not what I want.

It happens too in Change Password Form, filling the Old Password Field. This situation is a security hole, since a user can change other user’s password if first user left opened his session.

Is there any option to say it to the browser that I don’t want to fill a form other than changing the field name?

Answer 1

You would have to edit each form element, but here’s how you do it

<input name="q" type="text" autocomplete="off"/>