1164798 - Password reset form field filled with saved form data

Status: RESOLVED DUPLICATE of bug 1119063

(Toolkit :: Password Manager, defect)

Description

[Ivan Kresic]

Attachment: Login form remebered the details, email and pass. The reset password form autofills the first password field

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36

Steps to reproduce:

It's an angular web app. Password manager saved email and password entries from example.com/#/login. Clicked to reset the password at example.com/#/resetting  


Actual results:

The reset password form gets filled with the saved password (only the first field, not the repeat password field), even when autocomplete is set to off and I cannot disable the autofill without deleting the saved password from the password manager.


Expected results:

The reset password form which has two password fields should not be autofilled.

Comment 1

[Gingerbread Man]

autocomplete="off" has no effect on password and username fields starting with Firefox 38.
https://www.mozilla.org/firefox/38.0/releasenotes/
You can revert this behavior by setting signon.storeWhenAutocompleteOff to false in about:config.

You can prevent password autofill by setting signon.autofillForms to false in about:config. You then have to either double-click the username field, or type in the first letter of the username, then select the username from the list.

Comment 2

[Matthew N. [:MattN]]

You should use autocomplete="new-password" on the fields to enter new passwords.