If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Password reset form field filled with saved form data

UNCONFIRMED
Unassigned

Status

()

Toolkit
Password Manager
UNCONFIRMED
2 years ago
10 months ago

People

(Reporter: Ivan Kresic, Unassigned)

Tracking

(Depends on: 1 bug)

38 Branch
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

2 years ago
Created attachment 8605742 [details]
Login form remebered the details, email and pass. The reset password form autofills the first password field

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36

Steps to reproduce:

It's an angular web app. Password manager saved email and password entries from example.com/#/login. Clicked to reset the password at example.com/#/resetting  


Actual results:

The reset password form gets filled with the saved password (only the first field, not the repeat password field), even when autocomplete is set to off and I cannot disable the autofill without deleting the saved password from the password manager.


Expected results:

The reset password form which has two password fields should not be autofilled.

Comment 1

2 years ago
autocomplete="off" has no effect on password and username fields starting with Firefox 38.
https://www.mozilla.org/firefox/38.0/releasenotes/
You can revert this behavior by setting signon.storeWhenAutocompleteOff to false in about:config.

You can prevent password autofill by setting signon.autofillForms to false in about:config. You then have to either double-click the username field, or type in the first letter of the username, then select the username from the list.
Component: Untriaged → Password Manager
Depends on: 1119507
OS: Unspecified → All
Product: Firefox → Toolkit
Hardware: Unspecified → All
You need to log in before you can comment on or make changes to this bug.