Out of the box Magento 2 adds <div class="modal-content" data-role="content">
div at the end of the code. I am not sure what it is supposed to do. But it contains a login form with password input. Chrome/firefox are now signalling any pages that ask for sensitive information that are not served over SSL. So every page of Magento 2 will show as "not secure" in Chrome where the SSL info is shown. It is because of this line of code:
<input name="login[password]" autocomplete="off" class="input-text" id="pass" title="Password" data-validate="{required:true, 'validate-password':true}" aria-required="true" type="text">
Changing type to text removed the error. But I do not know which file is generating this. And if other login forms use the same code, their password entry will be visible instead of ****
Maybe it is coming from vendor\magento\module-customer\view\frontend\web\template\authentication-popup.html
but whenever I change the code there it does not affect my magento pages. (flush, reindex, compile etc)
I do not want to run the entire frontend in SSL & do not want the "not secure" error - which is misunderstood by many.
Is there any way to fix this? Where is the code to edit the output of the problematic password input?
This is the chrome inspector HTML output for a fresh 2.1.5 install on blank theme after static:deploy
modal-content
is added to every Magento 2 page in your frontend? Which version of Magento 2 are you using? Did you do any customizations with ui Components? – Anna Völkl Mar 9 '17 at 6:36