Ethernet Switches - Commercial & Enterprise Ethernet Solutions

Premier Network Access Control (NAC) Solutions & Security | Fortinet

Artificial Intelligence for IT Operations | FortiAIOps Fortinet

What is Secure SD-WAN (Software-Defined Wide Area Network)? | Fortinet

Secure Wireless Access Points

Fortinet Product Demos

Líder global en soluciones y servicios de ciberseguridad | Fortinet

Fortinet | Ottimizzare il Security Fabric

SASE Solution - Secure Access Service Edge | Fortinet

Provide management and controls for privileged accounts | FortiPAM

To comply with WCAG 2.1, fields must identify what their purpose is _programmatically_. If done correctly,
this allows browsers to help users fill in forms with known information, such as their name and email address.

This is accomplished via the `autocomplete` attribute, which should be set to a 
[supported value](https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete) wherever
appropriate, e.g. 

```html
<label for="name">
  First Name
</label>
<input id="name" type="text" autocomplete="given-name">
```

For fields where `autocomplete` is not appropriate, e.g. due to security, or the field not matching the
specification, the specific field should be ignored.

## Methodology

* All fields which could support `autocomplete` (e.g. text fields)
  are checked. Other fields - like dropdown menus - are ignored.
* The [accessible name](https://www.w3.org/TR/accname-1.2/) of each field is considered. In most cases this
  will be the `<label>` for the field.
* If the name matches a known pattern the field 
  must have an appropriate `autocomplete` value specified.
  For example, an `<input>` with type `text` with a label of 
  "First Name" would be expected to have an autocomplete value 
  of `given-name` or similar.

Note that using `autocomplete="on"` is not sufficient to pass this check, a
specific named autocomplete value must be used. See the
[supported values](https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/autocomplete).

## Troubleshooting

If a field is a false positive, check whether the field has an 
appropriate accessible name (i.e. a `<label>` or `aria-label`).

If the label is incorrect, Silktide may assume that the field 
requires `autocomplete` where it does not. You should fix the 
label to avoid this.

Otherwise, you can simply ignore the specific field.

## More information

* [How to use HTML 5.2 attributes](https://www.w3.org/WAI/WCAG21/Techniques/html/H98)

identify-input-purpose

June 2024

May 2024

Fortinet

Title / URL	Issues
Ethernet Switches - Commercial & Enterprise Ethernet Solutionswww.fortinet.com/products/ethernet-switches	8
Premier Network Access Control (NAC) Solutions & Security \| Fortinetwww.fortinet.com/products/network-access-control	8
Artificial Intelligence for IT Operations \| FortiAIOps Fortinetwww.fortinet.com/products/fortiaiops	8
What is Secure SD-WAN (Software-Defined Wide Area Network)? \| Fortinetwww.fortinet.com/products/sd-wan	8
Secure Wireless Access Pointswww.fortinet.com/products/wireless-access-points	8
Fortinet Product Demoswww.fortinet.com/demo-center	2
Líder global en soluciones y servicios de ciberseguridad \| Fortinetwww.fortinet.com/lat	2
Fortinet \| Ottimizzare il Security Fabricwww.fortinet.com/it	2
SASE Solution - Secure Access Service Edge \| Fortinetwww.fortinet.com/products/sase	2
Provide management and controls for privileged accounts \| FortiPAMwww.fortinet.com/products/fortipam	2

Identify the purpose of fields programmatically

Fortinet

Where this issue has occurred