Closed
Bug 1130858
Opened 9 years ago
Closed 9 years ago
Recipient autocomplete suggestion overrides ANY manual address input if quickly entered/pasted and confirmed with Enter/Tab before autocomplete suggestions disappear
Categories
(Toolkit :: Autocomplete, defect)
Toolkit
Autocomplete
Tracking
()
RESOLVED
FIXED
mozilla42
Tracking | Status | |
---|---|---|
firefox42 | --- | fixed |
People
(Reporter: magnusbae, Assigned: mkmelin)
References
Details
(Keywords: dataloss, privacy)
Attachments
(1 file, 1 obsolete file)
9.36 KB,
patch
|
mak
:
review+
|
Details | Diff | Splinter Review |
User Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36 Steps to reproduce: - Start typing in an address, wait for autocomplete - Note that autocomplete does not suggest the address you want - Quickly type in the rest of the address you are e-mailing and hit enter before the autocomplete suggestions disappear Actual results: - Recipient row contains the first of the autocomplete suggestions provided earlier. Expected results: - Recipient row should contain the address I just typed in.
Comment 1•9 years ago
|
||
Magnus, thanks for reporting! Grrrrr... autocomplete is really giving us a headache... Magnus, is this covered by some other bug? I suspect not, because it's like the other way round from the complaints we had so far: Here: Autocomplete is slow to disappear, thus does not KEEP my actual input Other bugs: Autocomplete is slow to appear, thus does not CHANGE (autocomplete) my actual input
Assignee | ||
Comment 2•9 years ago
|
||
Hmm, this check is probably what's causing it, and likely redundant now. http://mxr.mozilla.org/comm-central/source/mozilla/toolkit/components/autocomplete/nsAutoCompleteController.cpp#1352
Assignee: nobody → mkmelin+mozilla
OS: Windows 8.1 → All
Hardware: x86 → All
Comment 3•9 years ago
|
||
Sigh, I'm starting to hate bugs where autocomplete randomly swaps recipients against users intention... Which is datalossy and bad violation of privacy -> critical Magnus, you seemed to have a good idea of how to fix this when you assigned this bug to yourself: (In reply to Magnus Melin from comment #2) > Hmm, this check is probably what's causing it, and likely redundant now. > http://mxr.mozilla.org/comm-central/source/mozilla/toolkit/components/ > autocomplete/nsAutoCompleteController.cpp#1352
Comment 4•9 years ago
|
||
What this really means is that ANY *rapidly* confirmed changes/additions/replacements of a given autocomplete suggestion will FAIL without exception - this should be fixed asap. Sample scenario: user types "jo" to see if john.miller@asdf.com is already in AB autocomplete suggests "john.miller@bar.com" user selects "bar.com", pastes in "asdf.com", and immediately confirms with tab or Enter. TB cunningly reverts that to the original autocomplete suggestion, "john.miller@bar.com". Which might be an entirely different person. Even replacing the entire address will be ignored if done quickly: Let's say autocomplete suggested "joe@bar.com" which is an entirely unrelated contact; user selects all of that with Ctrl+A, pastes in "john.miller@asdf.com", and immediately confirms with tab or Enter. TB cunningly reverts that to the original autocomplete suggestion, "joe@bar.com". Confidential data can easily get sent to the wrong person, which is a massive violation of privacy. It's not always easy to notice that TB has swapped the recipient; worse, there's absolutely no reason to recheck if you know what you've just entered is correct, and you've confirmed that. Power user's natural reaction: TB sucks! We're talking of those power users who we need to recommend Thunderbird to their employees, workgroups, etc.
status-thunderbird38:
--- → affected
status-thunderbird39:
--- → affected
status-thunderbird40:
--- → affected
status-thunderbird_esr31:
--- → affected
tracking-thunderbird_esr38:
--- → ?
Updated•9 years ago
|
Summary: Autocomplete suggestions override typed in value when pressing enter before autocomplete suggestions disappear → Recipient autocomplete suggestion overrides ANY manual address input if quickly entered/pasted and confirmed with Enter/Tab before autocomplete suggestions disappear
Comment 6•9 years ago
|
||
There's an impressive variety of scenarios where TB reverts user's explicitly confirmed recipient and cunningly picks another unrelated recipient instead (which is dataloss and privacy violation): Bug 1130858 - Recipient autocomplete suggestion overrides ANY manual address input if quickly entered/pasted and confirmed with Enter/Tab before autocomplete suggestions disappear Bug 1138033 - Stubborn recipient autocomplete silently swaps recipients: Cannot compose message to valid, normal, new email address (doe@asdf.com/admin@foo.co) if similar longer address already exists in AB (john.doe@asdf.com/admin@foo.com) Bug 1152517 - Recipient autocomplete wrongly considers last mouse-hovered contact from results dropdown "selected" and then uses that unintended, random recipient upon blur (via Tab, Enter, or when moving to subject or body) So to work around all of them, users will need to: - Slow down when entering recipients to avoid Bug 1130858 - Put a comma even after a single recipient, or add every recipient to your AB first, to avoid Bug 1138033 - Move their mouse pointer into some safe corner of the screen before(!) entering a recipient, to avoid Bug 1152517 Easy, ain't it? :p
Assignee | ||
Comment 7•9 years ago
|
||
We can get rid of the if (value.IsEmpty()) use default case. We now go through the matches and find the one that case-insensitively matches. If there's no match there's no match. If there was a match it would have been found in the look and the value set. So it must be something not matching, and we should not change the value. The codepath in question is only executed for forceComplete=true, i.e. thunderbird. Try looks good: https://treeherder.mozilla.org/#/jobs?repo=try&revision=c9e749760b09
Flags: needinfo?(mkmelin+mozilla)
Attachment #8622630 -
Flags: review?(mak77)
Assignee | ||
Updated•9 years ago
|
Component: Message Compose Window → Autocomplete
Product: Thunderbird → Toolkit
Version: 31 → unspecified
Comment 8•9 years ago
|
||
note I will be traveling tomorrow, then in Whistler, the review turn around time might not be the nicest.
Comment 9•9 years ago
|
||
Comment on attachment 8622630 [details] [diff] [review] bug1130858_autocomplete_overrides_entered.patch Review of attachment 8622630 [details] [diff] [review]: ----------------------------------------------------------------- Off-hand the change makes sense. I'm sort of blind flying here since you are the only forcecomplete consumer, so you likely know better than me how it should behave. I think sooner or later you should spend resources on writing some tests for toolkit/autocomplete, the situation doesn't look good, the risk of breaking TB unwillingly is high and you have no test coverage for these options...
Attachment #8622630 -
Flags: review?(mak77) → review+
Comment 10•9 years ago
|
||
We should be able to get this into TB 38.1.0 via THUNDERBIRD_38_VERBRANCH but it should really land in core first.
Assignee | ||
Comment 11•9 years ago
|
||
I think it's better to hold of and let it bake for until the next point release.
Updated•9 years ago
|
Assignee | ||
Comment 12•9 years ago
|
||
Needed to fix a test. But, what the was testing something unrealistic so... completeSelectedIndex doesn't set the textValue when there's suggestions
Attachment #8622630 -
Attachment is obsolete: true
status-thunderbird38:
affected → ---
status-thunderbird39:
affected → ---
status-thunderbird40:
affected → ---
status-thunderbird_esr31:
affected → ---
tracking-thunderbird_esr38:
40+ → ---
Attachment #8631770 -
Flags: review?(mak77)
Assignee | ||
Comment 13•9 years ago
|
||
Ok try run at https://treeherder.mozilla.org/#/jobs?repo=try&revision=8f3228e9db6f
Updated•9 years ago
|
Attachment #8631770 -
Flags: review?(mak77) → review+
Comment 15•9 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/d42f9b90ecad
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
status-firefox42:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla42
Comment 17•9 years ago
|
||
http://hg.mozilla.org/releases/mozilla-esr38/rev/b4dfee2e3da8 for THUNDERBIRD_38_VERBRANCH
You need to log in
before you can comment on or make changes to this bug.
Description
•