Default setting should be secure

[Brant Knudson]

Horizon has some instructions for setting it up in a secure way[1]. These settings should be the default.

[1] http://docs.openstack.org/developer/horizon/topics/deployment.html#secure-site-recommendations

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/154976

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/154943
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=7bd87acdd07f0718e32221525ff54a188f8cecb8
Submitter: Jenkins
Branch: master

commit 7bd87acdd07f0718e32221525ff54a188f8cecb8
Author: Brant Knudson <email address hidden>
Date: Wed Feb 11 10:38:58 2015 -0600

    Set the password_autocomplete default to "off"

    It's safer to set the autocomplete option to "off" for passwords
    so that browsers get the hint to not save it. The default should
    be secure so that deployers need to make a conscious decision to
    be less-secure.

    This is for security hardening.

    SecurityImpact

    Closes-Bug: 1420863

    Change-Id: If2c3439cf23b11dd7829a4d7866d3b21409a7d69

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/154976
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-dashboard/commit/?id=9eed38ca508e3fb6cdb4390cf504ae211bc9a665
Submitter: Jenkins
Branch: master

commit 9eed38ca508e3fb6cdb4390cf504ae211bc9a665
Author: Mark Vanderwiel <email address hidden>
Date: Wed Feb 11 11:47:09 2015 -0600

    Change the default for password_autocomplete to off

    For better default security, change the default to off
    for password autocomplete. Base openstack horizon is also
    making this change soon.

    Change-Id: Ie46dd5b5e5d65dd4bfa298a4c2d571cf13b94812
    Closes-Bug: #1420863

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/cookbook-openstack-dashboard ocata-eol release.