686931 - form fields site https

Status: RESOLVED INVALID

(Toolkit :: Form Manager, defect)

Description

[Márcio Fornari]

Attachment: error_fields_https.JPG

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0
Build ID: 20110811165603

Steps to reproduce:

Making access to a bank account.


Actual results:

The Firefox is saving the form fields from other users who access that computer.


Expected results:

when a page is https not save form fields or create one parameter for not saving form fields of one especific site

Comment 1

[Justin Dolske [:Dolske]]

Firefox deliberately saves form data from sites regardless of protocol, long established practice is for sites to use autocomplete=off on sensitive form fields. Your use case is inherently risky, anyway, in that multiple users should have different accounts and/or profiles, anyway.