I am having a web application where I face a vulnerability issue. When taken chrome heap memory dump, I am able to see the password which I entered on the login form. Screen shot from the heapdump is attached here.
Would appreciate of any help to get out from this issue.
- Added autocomplete attribute to form tag, login field and password field
- Added below meta tags under head
<meta content="no-cache" http-equiv="PRAGMA">
<meta content="private" http-equiv="CACHE-CONTROL">
<meta content="no-store" http-equiv="CACHE-CONTROL">
<meta content="must-revalidate" http-equiv="CACHE-CONTROL">
<meta content="post-check=0,pre-check=0" http-equiv="CACHE-CONTROL">
<meta content="-1" http-equiv="Expires">