Open Bug 1119035 (formless-logins) Opened 6 years ago Updated 5 months ago

[meta] Support capturing and filling login credentials on web pages that don't use <form> elements or trigger submit events

Categories

(Toolkit :: Password Manager, defect)

defect
Not set
normal

Tracking

()

People

(Reporter: ckarlof, Unassigned)

References

(Depends on 3 open bugs, Blocks 6 open bugs, )

Details

(Keywords: meta, Whiteboard: [passwords:heuristics])

User Story

As a user I want PM to correctly fill a login for my favorite site that has incorrect or strange use of forms and fields.
Some sites (e.g., http://www.hulu.com/) don't use a <form> element in its login experience. The existing password manager code can't capture and fill the user's username and password unless the login page uses a <form> element. This is a breakdown bug for the password manager to support such sites.
Blocks: 1119083
Summary: Breakdown: Support capturing and filling login credentials on web pages that don't use <form> elements → Breakdown: Support capturing and filling login credentials on web pages that don't use <form> elements or trigger submit events
Blocks: 787801
Priority: -- → P1
This could be split into two parts, although they're a bit intertwined. Filling an already-saved login into a page without a <form> (just a password and username field) should be fairly straightforward to do. But saving the login is harder, because there's no formsubmit event to trigger it. But this is also a general problem we want to solve, since this can happen even when there's a form (eg <img src=login.jpg oncick="doLogin()">)
The heuristic of

1) we have captured login data and the visibility of the password field went from visible -> not visible, or
2) we have captured some login data and a new page load happened

to trigger the showing of the capture dialog has worked for me in the past. This heuristic requires that we capture user input as the user enters it, rather than wait for a specific event (e.g., onsubmit). 

It's not perfect, of course, but nothing is. It can get challenging when dealing with change password pages, because sometimes those pages always show a password field. 

I, of course, generally encourage more creative thinking about this.
> This heuristic requires that we capture user input as the user enters it, rather than wait for a specific event (e.g., onsubmit). 

For related discussion of this idea, see https://bugzilla.mozilla.org/show_bug.cgi?id=1119077#c1
Duplicate of this bug: 1130783
Depends on: 1132211
No longer blocks: 1120860
Whiteboard: [blocked]
Blocks: 1156601
Assignee: nobody → MattN+bmo
Status: NEW → ASSIGNED
Points: --- → 5
Flags: qe-verify-
Flags: firefox-backlog+
Whiteboard: [blocked]
Iteration: --- → 40.3 - 11 May
Iteration: 40.3 - 11 May → 41.1 - May 25
User Story: (updated)
Whiteboard: Heuristics+Recipes
Depends on: 1166947
Depends on: 1166965
Depends on: 1166995
Depends on: 1166998
Alias: formless-logins
Assignee: MattN+bmo → nobody
Status: ASSIGNED → NEW
Iteration: 41.1 - May 25 → ---
Points: 5 → ---
User Story: (updated)
Flags: qe-verify-
Keywords: meta
Summary: Breakdown: Support capturing and filling login credentials on web pages that don't use <form> elements or trigger submit events → Support capturing and filling login credentials on web pages that don't use <form> elements or trigger submit events
Depends on: 1167044
Blocks: 1167657
Whiteboard: Heuristics+Recipes → Heuristics-Recipes:passwords
Depends on: 1168707
No longer blocks: 1167657
Depends on: 1173583
No longer blocks: 1156601
Depends on: 1206879
Blocks: 1264965
Depends on: 1275876
Whiteboard: Heuristics-Recipes:passwords → [passwords:heuristics]
Depends on: 1287202
Blocks: 1289947
Depends on: 1291060
Removing the priority from a meta bug.
Priority: P1 → --
No longer depends on: 1275876
Duplicate of this bug: 207147
Depends on: 442524
No longer depends on: 442524
Duplicate of this bug: 442524
Summary: Support capturing and filling login credentials on web pages that don't use <form> elements or trigger submit events → [meta] Support capturing and filling login credentials on web pages that don't use <form> elements or trigger submit events
Depends on: 1536728
No longer blocks: 1427204
Depends on: 1548855
Blocks: 1569026
Duplicate of this bug: 1570282
Blocks: 1583270
Blocks: 1536728
No longer depends on: 1536728
No longer blocks: 1536728
Depends on: 1536728
You need to log in before you can comment on or make changes to this bug.