From e364a6ad190edcd36a8600194779a60e6afe0e54 Mon Sep 17 00:00:00 2001
From: Ben Lesh <ben@benlesh.com>
Date: Tue, 30 Jun 2020 13:26:18 -0500
Subject: [PATCH] Hide secret code from input history (#9032)

Currently, the secret code will show up in the input history. That, I think, means that anyone that can open that page in a shared browser instance could join the org.
---
 app/views/users/_org_non_member.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/users/_org_non_member.html.erb b/app/views/users/_org_non_member.html.erb
index f1f0b0039..23f987478 100644
--- a/app/views/users/_org_non_member.html.erb
+++ b/app/views/users/_org_non_member.html.erb
@@ -6,7 +6,7 @@
     <div class="crayons-field mb-6">
       <%= label_tag :org_secret, "Secret code", class: "crayons-field__label" %>
       <p class="crayons-field__description">Provided to you by an org admin</p>
-      <%= text_field_tag :org_secret, nil, placeholder: "...", class: "crayons-textfield" %>
+      <%= text_field_tag :org_secret, nil, placeholder: "...", class: "crayons-textfield", autocomplete: "off" %>
     </div>
 
     <button class="crayons-btn" type="submit">Join Organization</button>