Application password UX improvements#11079

Draft

johnbillion wants to merge 6 commits intoWordPress:trunkfrom

johnbillion:application-password-ux

Commits on Feb 27, 2026

Increase clarity of the success URL, and gate approval behind a checkbox.
johnbillion
committed
Add a Copy button to the new application password screen. This matches the one on the profile screen.
johnbillion
committed
Fix form validation when an application password name isn't entered.
johnbillion
committed
Completely remove the reject_url handling. If a user rejects a request, it should not send any data to the requesting site or app.
johnbillion
committed
Reject success URLs that contain a username credential. These are almost exclusively used for phishing and is deprecated in modern browsers.
johnbillion
committed
Coding standards.
johnbillion
committed