Firefox Ignoring autocomplete="off"

RESOLVED INVALID

Status

()

RESOLVED INVALID
4 years ago
4 years ago

People

(Reporter: scottyb.3378, Unassigned)

Tracking

31 Branch
x86
Mac OS X
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

4 years ago
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:31.0) Gecko/20100101 Firefox/31.0 (Beta/Release)
Build ID: 20140716183446

Steps to reproduce:

I have created a form with autocomplete="off". The form contains two input fields (name, password), both of which have autocomplete="off".


Actual results:

When logging in, Firefox will autocomplete both of these fields. If I start typing my name it will drop-down the full name, and clicking this autofills both name and password.


Expected results:

Firefox should not be autofilling when autocomplete is set to off.
I understand that as of Firefox 30 the Password Manager should still enable password saving, but shouldn't be autofilling in this case.

I am basing this on this discussion:
https://bugzilla.mozilla.org/show_bug.cgi?id=956906
Particularly the line from comment 100:
"Normal form autofill can be disabled as usual."

As well as the corresponding line in the release notes (https://developer.mozilla.org/en-US/Firefox/Releases/30/Site_Compatibility#Security):
"Password Manager always prompts if the user wants to save the password, while the autofill can be disabled as usual."

Furthermore, specific mention is made in both of these places that this change would bring Firefox in line with IE and Chrome which do the same thing. Both Chrome 36 and IE 11 do not autofill in this case.
(Reporter)

Comment 1

4 years ago
Note: I said that IE 11 does not autofill in this case. I couldn't get IE 11 to autofill at all for any sites, so this is a moot point.
Component: Untriaged → Password Manager
Product: Firefox → Toolkit
(Reporter)

Comment 2

4 years ago
Simple example of the problem:
http://jsfiddle.net/fg3w0uu2/

The form and input fields use autocomplete="off".
Expected: On submitting the form, Firefox asks if you want to save the email/password. But it will not allow you to autofill a saved email/password next time you visit the form.
Actual: Firefox will prompt you to autofill the form
Confirmed 35.0a1 (2014-09-07) Win 7 x64
Status: UNCONFIRMED → NEW
Ever confirmed: true
I think you are confusing "auto-fill" and "autocomplete". We currently don't auto-fill with @autocomplete=off but we intentionally allow the user to choose from the autocompletion dropdown on the username field.
(Reporter)

Comment 5

4 years ago
So if autocomplete is turned off, it's supposed to not auto-fill the form, but allow the user to use the autocompletion dropdown to fill it?
(Reporter)

Comment 7

4 years ago
Okay. It appears to be working as expected then. Is there no way to disable autocompletion altogether?

Comment 8

4 years ago
Double-clicking the username field or typing the first letter of the username, then selecting it, is not autofill but a manual procedure.

As mentioned in the release notes linked in this report's description, this is an intentional change introduced in bug 956906.
https://developer.mozilla.org/en-US/Firefox/Releases/30/Site_Compatibility#sect25
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.