Disable autocomplete on sensitive fields

Disable autocomplete for registration/login/password change/password
reset forms, and security question / captcha fields on Edit Profile
form.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>

layerindex/forms.py

@@ -202,6 +202,10 @@ class EditProfileForm(StyledModelForm):
 
     def __init__(self, *args, **kwargs):
         super(EditProfileForm, self ).__init__(*args, **kwargs)
+        for field in ['captcha', 'security_question_1', 'security_question_2', 'security_question_3', 'answer_1', 'answer_2', 'answer_3']:
+            self.fields[field].widget.attrs.update({
+                'autocomplete': 'off'
+            })
         user = kwargs.get("instance")
         try:
             self.fields['security_question_1'].initial=user.userprofile.securityquestionanswer_set.all()[0].security_question

templates/django_registration/registration_form.html

@@ -2,7 +2,7 @@
 {% load i18n %}
 
 {% block content %}
-<form id="registration_form" method="post" action=".">
+<form id="registration_form" method="post" action="." autocomplete="off">
     {% for hidden in form.hidden_fields %}
         {{ hidden }}
     {% endfor %}

templates/registration/login.html

@@ -5,7 +5,7 @@
 {% endblock %}
 
 {% block content %}
-<form id="login_form" method="post" action=".">
+<form id="login_form" method="post" action="." autocomplete="off">
   {{ form.as_p }}
 
   <input type="submit" class="btn btn-default" value="{% trans 'Log in' %}" />

templates/registration/password_change_form.html

@@ -2,7 +2,7 @@
 {% load i18n %}
 
 {% block content %}
-<form method="post" action=".">
+<form method="post" action="." autocomplete="off">
     {% for hidden in form.hidden_fields %}
         {{ hidden }}
     {% endfor %}

templates/registration/password_reset_confirm.html

@@ -5,7 +5,7 @@
 
 {% if validlink %}
 
-<form id="password_form" method="post" action=".">
+<form id="password_form" method="post" action="." autocomplete="off">
     {% for hidden in form.hidden_fields %}
         {{ hidden }}
     {% endfor %}

templates/registration/password_reset_form.html

@@ -2,7 +2,7 @@
 {% load i18n %}
 
 {% block content %}
-<form id="password_form" method="post" action=".">
+<form id="password_form" method="post" action="." autocomplete="off">
     {% for hidden in form.hidden_fields %}
         {{ hidden }}
     {% endfor %}