Password reset form field filled with saved form data

UNCONFIRMED
Unassigned

Status

()

UNCONFIRMED
4 years ago
2 years ago

People

(Reporter: kresic.ivan, Unassigned)

Tracking

(Depends on: 1 bug)

38 Branch
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

4 years ago
Created attachment 8605742 [details]
Login form remebered the details, email and pass. The reset password form autofills the first password field

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36

Steps to reproduce:

It's an angular web app. Password manager saved email and password entries from example.com/#/login. Clicked to reset the password at example.com/#/resetting  


Actual results:

The reset password form gets filled with the saved password (only the first field, not the repeat password field), even when autocomplete is set to off and I cannot disable the autofill without deleting the saved password from the password manager.


Expected results:

The reset password form which has two password fields should not be autofilled.

Comment 1

4 years ago
autocomplete="off" has no effect on password and username fields starting with Firefox 38.
https://www.mozilla.org/firefox/38.0/releasenotes/
You can revert this behavior by setting signon.storeWhenAutocompleteOff to false in about:config.

You can prevent password autofill by setting signon.autofillForms to false in about:config. You then have to either double-click the username field, or type in the first letter of the username, then select the username from the list.
Component: Untriaged → Password Manager
Depends on: 1119507
OS: Unspecified → All
Product: Firefox → Toolkit
Hardware: Unspecified → All
You need to log in before you can comment on or make changes to this bug.