1198363 - Password manager doesn't generate events for filling that web content expects

Status: NEW

(Toolkit :: Password Manager, defect, P2)

Description

[Kamil Jozwiak [:kjozwiak]]

Attachment: issue.png

I'm not really sure how relevant this bug really is, but I noticed when you fill in a password via the "Fill Password" context menu in the "New Password" field on facebook which has a field placeholder, the password will overlap the placeholder text. I tried other websites that use placeholders in their credential fields (linkedin, twitter) but couldn't reproduce this.

* attached a screenshot to illustrate the issue

Maybe it's worth looking into why it's happening with the "New Password" field on Facebook's signup form. Perhaps this might affect other sites out there that are using placeholders in their credential fields.

STR:

- visit facebook.com (make sure you have some logins saved)
- right click on the "New Password" field and use "Fill Password"
- the filled in password will overlap the placeholder text (note: pasting works fine)

Comment 1

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

Do we need a recipe for password fields with placeholder text?

Comment 2

[Matthew N. [:MattN]]

Kamil, would you mind seeing if you can still reproduce this?

Comment 3

[Adrian Florinescu [:aflorinescu]]

Tested on Win 10 and Ubuntu 16.04 and reproducible with 66.0.2, 67.0b7 and 68.0a1 2019-04-02

linkedin - no placeholder text i could see.
facebook - yes, issue fully reproduces.
twitter - yes, but since the placeholder text is not centered, it is not that visible as on facebook.
reddit - yes, for both login/subscribe form

The same issue also applies to Fill Login.

Note that this bug doesn't happen on a static placeholder text(e.g. placeholder="text". )

Comment 4

[Matthew N. [:MattN]]

Thanks

Comment 5

[Alin Ilea, Desktop Test Engineering]

This issue is also reproducible on Sears.com, using latest Nightly 68.0a1 (2019-05-09), tested on Win10 and Ubuntu 18.04

Steps:

1. Go to browser Options, Privacy and Security section, Forms & Autofill section, click the "Saved Addresses..." button and add 1 or 2 address forms ( in "Country or Region" drop-down select United States ).

2. Open Firefox with a new profile

3. Navigate to Sears.com

4. In the upper right corner, hover over Sign In and then select Join for free

5. Double click on First Name

6. Hover the cursor over suggestion displayed and observe the result.

Actual result:
The address values which correspond to the saved autofill profile overlap the default text from the boxes.

Comment 6

[Timea Cernea [:tbabos][inactive]]

Reproduced on latest Nightly 69.0a1 (2019-07-03) on sears.com as described in Comment 5.

Comment 9

[Timea Cernea [:tbabos][inactive]]

Reproducible on reddit.com as well on latest Nightly71 on Windows 10 x64.

Comment 10

[Daniel Bodea [:danibodea]]

Also occurs on sogou.com with all versions and OSes:
https://www.sogou.com/qq?ru=https%3A%2F%2Fwww.sogou.com%2Flogin%2Fqq_login_callback_page_new.html%3Fxy%3Dhttps%26from%3Dhttps%253A%252F%252Fwww.sogou.com%252F

Comment 11

[Timea Cernea [:tbabos][inactive]]

Updating affected flags.

Comment 13

[Greg Valure]

Rather than file another bug that points here, I'll just add https://www.coned.com/en/login to the list. Like https://investor.vanguard.com/home, if the password manager fills in the e-mail address and password the site doesn't recognize it as such because it didn't get some event it was expecting. If I add a space to either field and then delete it the login button enables.

Comment 14

[BugBot [:suhaib / :marco/ :calixte]]

The severity field for this bug is relatively low, S3. However, the bug has 3 duplicates.
:sgalich, could you consider increasing the bug severity?

For more information, please visit auto_nag documentation.

Comment 15

[Sergey Galich [:serg]]

Possibly https://connect.secure.wellsfargo.com/auth/login/present?loginMode=jukePassword&serviceType=p2p suffers from this bug. It doesn't fill when used with mouse, fills when used with keyboard.