1647381 - [deathwishcoffee.com]Credit Card Autofill Expiration date has invalid format

Status: NEW

(Toolkit :: Form Autofill, defect, P3)

Description

[Marcela (Please NI request to Brindusa Tot)]

Attachment: CC_dateformat.mp4

Affected Version:
Firefox 79.0a1 (2020-06-22)(64-bit)

TEsted on:
Ubuntu 20.04 LTS

Preconditions
Have the following set up:

1. Enable the following preferences and restart the browser:
   "extensions.formautofill.creditCards.available" pref is set to true
   "extensions.formautofill.creditCards.enabled" pref is set to true
   (for Beta also set up: extensions.formautofill.available set to "on")
2. Have multiple saved Credit Cards
3. NordVPN set up for USA or region to US

Steps to Reproduce

1. Open Firefox and to to https://www.deathwishcoffee.com
2. Reach the Payment form
3. Click on "Name on Card" and select one in the dropdown list

Expected Result
All fields should be fill without issues

Actaul Result
Expiration date field is completed with an invalid format

Comment 1

[Marcela (Please NI request to Brindusa Tot)]

Attachment: CC_date.mp4

Comment 2

[Marcela (Please NI request to Brindusa Tot)]

Attachment: CC_DateFormat.png

Comment 3

[Adam Roach [:abr]]

This problem arises because the only indication that the date needs to be exactly 5 characters long is in instructions provided to the user. It would be possible to work around this by adding heuristics to check, e.g., the placeholder field on the <input> element, as well as any nearby text (e.g., in <label> elements) for patterns like /(mm ?[\/-] ?yy(yy)?)|(yy(yy)? ?[\/-] ?mm/,"i" and reformatting the cc-exp value in the modified profile to match.

This seems like it is likely to be somewhat uncommon behavior; and, given the difficulty in reliably detecting it, I would suggest not pursuing a fix unless it appears on a large number of sites or a high-profile site.

Comment 4

[Matthew Gaudet (he/him) [:mgaudet]]

This behaviour is the default for all sites powered by Shopify; I ran into this twice this morning.

Comment 5

[Matthew Gaudet (he/him) [:mgaudet]]

This seems to have been resolved, at least for Shopify powered sites, sometime in the last few months.