To prevent a browser from storing passwords with HTML and JavaScript, we set the autocomplete attribute to off and change the readonly attribute dynamically.
For instance, we write
<input
type="text"
name="username"
autocomplete="off"
readonly
onfocus="this.removeAttribute('readonly');"
/>
to set the autocomplete attribute to off.
And we set the onfocus attribute to JavaScript code that calls removeAttribute on the element to remove the readonly attribute when we focus on it.
