From ea91e4bcabf47dc548bf7d14c7ae09ac99b8b603 Mon Sep 17 00:00:00 2001
From: Andrew Ozz <azaozz@git.wordpress.org>
Date: Sat, 18 May 2013 22:56:21 +0000
Subject: [PATCH] Fix Chrome disregarding autocomplete="off" for password
 fields. Add autocomplete="off" to forms where the users can choose new
 password. Fixes #24364.

git-svn-id: https://develop.svn.wordpress.org/trunk@24291 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/user-edit.php | 4 ++--
 wp-admin/user-new.php  | 2 +-
 wp-login.php           | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/wp-admin/user-edit.php b/wp-admin/user-edit.php
index 13a2f63923..6cf15f2529 100644
--- a/wp-admin/user-edit.php
+++ b/wp-admin/user-edit.php
@@ -189,8 +189,8 @@ if ( ! IS_PROFILE_PAGE ) {
 } ?>
 </h2>
 
-<form id="your-profile" action="<?php echo esc_url( self_admin_url( IS_PROFILE_PAGE ? 'profile.php' : 'user-edit.php' ) ); ?>" method="post"<?php do_action('user_edit_form_tag'); ?>>
-<?php wp_nonce_field('update-user_' . $user_id) ?>
+<form id="your-profile" autocomplete="off" action="<?php echo esc_url( self_admin_url( IS_PROFILE_PAGE ? 'profile.php' : 'user-edit.php' ) ); ?>" method="post"<?php do_action('user_edit_form_tag'); ?>>
+<?php wp_nonce_field('update-user_' . $user_id); ?>
 <?php if ( $wp_http_referer ) : ?>
 	<input type="hidden" name="wp_http_referer" value="<?php echo esc_url($wp_http_referer); ?>" />
 <?php endif; ?>
diff --git a/wp-admin/user-new.php b/wp-admin/user-new.php
index 13a8e12deb..9c90483f3c 100644
--- a/wp-admin/user-new.php
+++ b/wp-admin/user-new.php
@@ -299,7 +299,7 @@ if ( current_user_can( 'create_users') ) {
 		echo '<h3 id="create-new-user">' . __( 'Add New User' ) . '</h3>';
 ?>
 <p><?php _e('Create a brand new user and add it to this site.'); ?></p>
-<form action="" method="post" name="createuser" id="createuser" class="validate"<?php do_action('user_new_form_tag');?>>
+<form action="" autocomplete="off" method="post" name="createuser" id="createuser" class="validate"<?php do_action('user_new_form_tag');?>>
 <input name="action" type="hidden" value="createuser" />
 <?php wp_nonce_field( 'create-user', '_wpnonce_create-user' ) ?>
 <?php
diff --git a/wp-login.php b/wp-login.php
index ddde661667..7edec2b67d 100644
--- a/wp-login.php
+++ b/wp-login.php
@@ -503,7 +503,7 @@ case 'rp' :
 	login_header(__('Reset Password'), '<p class="message reset-pass">' . __('Enter your new password below.') . '</p>', $errors );
 
 ?>
-<form name="resetpassform" id="resetpassform" action="<?php echo esc_url( site_url( 'wp-login.php?action=resetpass&key=' . urlencode( $_GET['key'] ) . '&login=' . urlencode( $_GET['login'] ), 'login_post' ) ); ?>" method="post">
+<form name="resetpassform" id="resetpassform" autocomplete="off" action="<?php echo esc_url( site_url( 'wp-login.php?action=resetpass&key=' . urlencode( $_GET['key'] ) . '&login=' . urlencode( $_GET['login'] ), 'login_post' ) ); ?>" method="post">
 	<input type="hidden" id="user_login" value="<?php echo esc_attr( $_GET['login'] ); ?>" autocomplete="off" />
 
 	<p>