PM68268: 'Autocomplete HTML attribute not disabled for password field' is flagged even if attribute is in the form element

APAR status

• Closed as program error.

Error description

• AppScan Standard flags 'Autocomplete HTML attribute not disabled
  for password field' issue even if the attribute
  'autocomplete=off' has already been added to the corresponding
  ?form? element.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  AppScan did not detect autocomplete=off in form tag
  

Problem conclusion

• Added autocomplete=off check to the form tag.
  
  Fixed in AppScan Standard 8.6
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL APPSCAN ST

• Fixed component ID

  5724T5900

Applicable component levels

• R800 PSN

     UP