1208552 - password save form should check/validate username and skip password for blank username

Status: RESOLVED WONTFIX

(Toolkit :: Password Manager, defect)

Description

[Ikonta]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0
Build ID: 20150904220344

Steps to reproduce:

For now typing password on special page (activate link) is oftenly used.
Such page usually provides different username or no username at all.
When typing passworn on such page FireFox suggests to save it, and saves.


Actual results:

But the saved password is unusable because of username field is null or mismatch really used username.


Expected results:

I think it would be right if Firefox will NOT suggest to save password for page without username.
For all other cases it will be enough to extend password save/update form with displaying username, which's password will be saved or updated.

Comment 1

[Gingerbread Man]

Please check if you can reproduce the issue with the current version of Firefox (41.0).

Comment 2

[Ikonta]

(In reply to Gingerbread Man from comment #1)
> Please check if you can reproduce the issue with the current version of
> Firefox (41.0).

In Firefox 42.0 I've find extended with username save password form. For initial save (adding a record) it works as expected.

While switching from ESR channel to Release I've got some possibly downstream troubles and dont't want to get them on my primary workstation.

So, does your question (ask user of current ESR-channel version to check current Release-channel version) and resolution for this bug means, that ESR channel is unsupported?
And why I don't asked me to try 9999 version?

Complete check (first of all — update of existing record) with final resolution for this bug will be done later, probably on 45 ESR.

Comment 3

[Gingerbread Man]

(In reply to Ikonta from comment #2)
> In Firefox 42.0 I've find extended with username save password form. For
> initial save (adding a record) it works as expected.

I don't understand what you mean. If the issue cannot be reproduced in the current Release, please change the resolution to WORKSFORME. If the issue can be reproduced in the current Release, please post a link to an actual page or testcase that shows the problem.

> So, does your question (ask user of current ESR-channel version to check
> current Release-channel version) and resolution for this bug means, that ESR
> channel is unsupported?

Bugs should be reported against the latest Nightly or at the very least the current Release.
https://developer.mozilla.org/en-US/docs/Mozilla/QA/Bug_writing_guidelines

ESR only receives security patches until it switches to the next major version, so it's pointless to file non-security bugs for it.

Comment 4

[Matthew N. [:MattN]]

The username field is editable in the capture doorhanger and in the manager and there are valid cases where a site has a password with no username which we would miss with the proposed solution.