Server: Password autocompletion

Index.php (aka the login page) contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support autocomplete.

For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0