1499869 - An invalid credit card number stored in our autofill database blocks usage of the edit address and credit card dialogs

Status: VERIFIED FIXED

(Toolkit :: Form Autofill, defect, P1)

Description

[Jared Wein [:jaws] (please needinfo? me)]

I have an invalid credit card number saved in my profile from testing.

When I go to the Edit Addresses dialog in Preferences, nothing appears and the browser console has:
Error: Invalid credit card number CreditCard.jsm:195:13 

The same happens for Edit Credit Cards.

It's odd too that credit card validation is happening when opening the address dialog.

Comment 1

[Jared Wein [:jaws] (please needinfo? me)]

Attachment: Screenshot of patch

The patch that I will attach will make the dialog usable again, but will not mask the number as you can see in this screenshot. We _could_ fix this, though the number is invalid so I'm less concerned about it.

Comment 2

[Jared Wein [:jaws] (please needinfo? me)]

Attachment: Bug 1499869 - Allow displaying of masked credit card numbers when they're invalid. r?MattN

I was unable to figure out how to write a test for this, as all of our tests add credit cards to the initialized storage. In the process of adding a credit card to the storage, we normalize the fields and check that the credit card number is valid. Without a valid credit card number the card fails to get added to storage. I couldn't find a way through testing to populate the form autofill storage manually.

Comment 3

[Jared Wein [:jaws] (please needinfo? me)]

Attachment: Bug 1499869 - Guard against invalid credit card numbers that may already be in our storage. r?MattN

Comment 4

[Jared Wein [:jaws] (please needinfo? me)]

Comment on attachment 9018090 [details]
Bug 1499869 - Allow displaying of masked credit card numbers when they're invalid. r?MattN

Marking this version as obsolete since I don't know how to transfer phabricator patches from one machine to another, thus they lose the phabricator unique ID.

Comment 5

[Matthew N. [:MattN]]

Verification steps: 
1) Use a build from many months ago and submit a 9 digit fake credit card (that doesn't pass the Luhn algorithm) in https://luke-chang.github.io/autofill-demo/basic_cc.html
2) Choose to save the record in autofill
3) Upgrade to an affected build and try to list the saved addresses or cards in Preferences
4) Delete the card from preferences and confirm it's actually gone by re-opening the dialog.

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/31220ab1dde6
Allow displaying of masked credit card numbers when they're invalid. r=MattN

Comment 7

[Cristina Coroiu [:ccoroiu]]

https://hg.mozilla.org/mozilla-central/rev/31220ab1dde6

Comment 8

[Timea Cernea [:tbabos][inactive]]

Verified - Fixed on latest Nigthly 65.0a1 (2018-11-14) (64-bit) on Windows 7/10 x64, Mac OS 10.13. and Ubuntu 16.04.
The invalid card saved on an older (07,2018) version can be deleted in the latest Nightly.