From 3a94df1eaf53ba178106ba93a557ea3d4631a8ab Mon Sep 17 00:00:00 2001
From: Scott Idem <stidem@gmail.com>
Date: Fri, 27 Mar 2026 21:57:14 -0400
Subject: [PATCH] fix: prevent password managers autofilling Gemini API key
 field
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Change type="password" to type="text" — the main signal password
managers use. Also add autocomplete="off", data-lpignore, data-1p-ignore
for broader coverage across Bitwarden, 1Password, LastPass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 cortex/static/settings.html | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/cortex/static/settings.html b/cortex/static/settings.html
index f33c319..ce601eb 100644
--- a/cortex/static/settings.html
+++ b/cortex/static/settings.html
@@ -258,8 +258,9 @@
       <form method="POST" action="/settings/gemini-key">
         <div class="field">
           <label for="gemini_api_key">API Key</label>
-          <input type="password" id="gemini_api_key" name="gemini_api_key"
-                 placeholder="{{ gemini_key_hint }}" autocomplete="off">
+          <input type="text" id="gemini_api_key" name="gemini_api_key"
+                 placeholder="{{ gemini_key_hint }}" autocomplete="off"
+                 spellcheck="false" data-1p-ignore data-lpignore="true">
         </div>
         <button type="submit">Save Key</button>
       </form>