Search input attributes
search-input-attributes
Search input attributes — `autocomplete` on search can leak sensitive queries on shared machines. `autocorrect` / `spellcheck` conflict with server-side search correction. Do not rely on `required` as the only “empty search” message.
Description
Search `autocomplete` can leak sensitive queries on shared machines; `autocorrect` / `spellcheck` conflict with server-side search correction; do not rely on `required` as the only empty-search message. Pass when search does not store sensitive queries via autocomplete, autocorrect/spellcheck are not fighting server-side correction, and empty search is not messaged by `required` alone; fail when search autocomplete stores queries on a shared machine or `required` is the only empty-search message.
When to use
Configuring HTML attributes on site or app search inputs.
Not when
Non-search text fields that need ordinary autocomplete.
Agent hint
Skip sensitive autocomplete on search; do not message empty search with required alone.
Search does not use `autocomplete` in a way that stores sensitive queries; `autocorrect`/`spellcheck` are not fighting server-side correction; empty search is not messaged by `required` alone.
Search `autocomplete` stores queries on a shared machine; `required` is the only empty-search message.
Citations