From 05df523395e2c9a06378f23dfd6e5439df14dffe Mon Sep 17 00:00:00 2001
From: Joas Schilling <coding@schilljs.com>
Date: Thu, 10 Nov 2016 17:06:48 +0100
Subject: [PATCH] Empty the password field on submission of the form

Signed-off-by: Joas Schilling <coding@schilljs.com>
---
 core/js/js.js                  | 8 +++-----
 core/templates/layout.user.php | 2 +-
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/core/js/js.js b/core/js/js.js
index efdb36187c..e8f6df4cfa 100644
--- a/core/js/js.js
+++ b/core/js/js.js
@@ -1546,11 +1546,7 @@ OC.PasswordConfirmation = {
 		if (this.requiresPasswordConfirmation()) {
 			this.$form.removeClass('hidden');
 			this.$background.removeClass('hidden');
-
-			// Hack against firefox ignoring autocomplete="off"
-			if (this.$input.val() === ' ') {
-				this.$input.val('');
-			}
+			this.$input.val('');
 		}
 
 		this.callback = callback;
@@ -1568,6 +1564,7 @@ OC.PasswordConfirmation = {
 			},
 			type: 'POST',
 			success: function(response) {
+				self.$input.val('');
 				nc_lastLogin = response.lastLogin;
 				self.$submit.addClass('icon-confirm').removeClass('icon-loading-small');
 
@@ -1579,6 +1576,7 @@ OC.PasswordConfirmation = {
 				}
 			},
 			error: function() {
+				self.$input.val('');
 				OC.Notification.showTemporary(t('core', 'Failed to authenticate, try again'));
 				self.$submit.addClass('icon-confirm').removeClass('icon-loading-small');
 			}
diff --git a/core/templates/layout.user.php b/core/templates/layout.user.php
index 1b4f0bc003..8689bf859a 100644
--- a/core/templates/layout.user.php
+++ b/core/templates/layout.user.php
@@ -148,7 +148,7 @@
 
 		<div id="sudo-login-background" class="hidden"></div>
 		<div id="sudo-login-form" class="hidden">
-			<input type="password" class="question" autocomplete="off" name="question" value=" "
+			<input type="password" class="question" autocomplete="off" name="question" value=" <?php /* Hack against firefox ignoring autocomplete="off" */ ?>"
 				placeholder="<?php p($l->t('Confirm your password')); ?>" />
 			<input class="confirm icon-confirm" title="<?php p($l->t('Confirm')); ?>" value="" type="submit">
 		</div>