A little background: I tookover maintaining a website for a client. They have forms that collect sensitive information, so they have it set up to get scanned for PCI Compliance every month. They haven't passed compliance in 8 months or so, and no one has tackled the issues until now.
Main Point: the PCI compliance scanned has a low level entry saying the following:
The web server running on this host uses password fields that allow auto-completion by users' browsers. This could allow a user's credentials to be stored by the browser and subsequently exposed if the user's computer becomes compromised.
After looking into the issue, the input fields have the autocomplete attribute, but it equals "false" instead of "off", which is incorrect.
I tried to change it to off, but then it throws an error and the only way I could get it to work is to restore the file from a backup.
Question: Is there a way I can edit this file (I'm guessing its encoded), or does adobe have a fix for it?
