防止.NET Core 2.2中的浏览器缓存表单值

Question

ASP.net Core 2.2 MVC Web Application

I have a number of forms where I do NOT want the browser to cache/show any previous entered data when the user return to the page. I want the elements/form to NOT cache any information. I do not simply want the browser not to show previously entered information, I want it not to be cached for security reasons.

I tried decorating the controller method with:

[ResponseCache(NoStore = true, Location = ResponseCacheLocation.None)]

to no avail, when I again navigate to the page/form and start typing, previously entered values keep showing up as autocomplete options.

I've tried playing with every nuance of this as well: Response Caching Middleware in ASP.NET Core

How is this done for all browsers nowadays?

Answer 1

Sounds like it is caused by the autocompletion feature of browser:

By default, browsers remember information that the user submits through fields on websites. This enables the browser to offer autocompletion (that is, suggest possible completions for fields that the user has started typing in) or autofill (that is, pre-populate certain fields upon load).

To disable this feature for a form:

<form autocomplete="off">
    ... 
</form>

Or disable a field :

<input ... autocomplete="off">

Here's a detailed explanation on off

The "off" keyword indicates either that the control's input data is particularly sensitive (for example the activation code for a nuclear weapon); or that it is a value that will never be reused (for example a one-time-key for a bank login) and the user will therefore have to explicitly enter the data each time, instead of being able to rely on the user agent to prefill the value for him; or that the document provides its own autocomplete mechanism and does not want the user agent to provide autocompletion values.

For more details, see how to disable autocompletion on MDN and w3c.org

Hope it helps.

Answer 2

You can use autocomplete="off" for html elements but chrome prevent this for some names like "name", "address" etc.

This topic was discussed earlier. Chrome ignores autocomplete="off"