I've just noticed on 4.8.2, that default.aspx now has autocomplete=off in the form tag:

[form name="form" method="post" action="/default.aspx" id="form" enctype="multipart/form-data" style="height: 100%;" autocomplete="off"]

When was this added and why?  I just checked an older 4.5.3 and it is not there.  There are 2 reasosn I dont like this at all -

1) Why are we forced to have autocomplete off by default, without knowing that it is off until we happen to accidentally notice this in the source code.  What is so bad about autocomplete?

And 2) This is not xhtml valid - I thought DNN was trying to improve its validness, not make it worse!

End rant.  Please someone tell me that there was a really good reason for this change :)

JK.

Tom Kraak wrote If I remember correctly, I read somewhere on the forum that autocomplete="on" poses a security risk ... I tried finding it, but no luck.

There is certainly a potential security/privacy risk here, but it should not have just been globally turned off.  It should have been turned off in core modules like Account Login module for the user ID, but module developers should be able to assume the default and turn it off on a case-by-case basis, since it works at the input tag level.

I too would like to turn autocomplete on, I've changed the global to autocomplete="on" but the textboxes still do not remember any history, please help.