1670674 - Firefox fills automatically fields marked with autocomplete="off"

Status: RESOLVED INVALID

(Toolkit :: Password Manager, defect)

Description

[Francesco Lodolo [:flod]]

Nightly 83.0 20201011093320

Not sure if there's an easier place to reproduce it, but trying to edit a user in Bugzilla, I get two fields autocompleted with my login information, even if these fields are marked explicitly as autocomplete="off".

This is the HTML fragment

<tr>
  <th><label for="name">IAM username:</label></th>
  <td>
      <input size="64" maxlength="255" name="iam_username" autocomplete="off" id="iam_username" value="">
  </td>
</tr>
<tr>
    <th>
      <label for="password">Update
        Password:
      </label>
    </th>
    <td>
      <input type="password" size="16" name="password" id="password" value="" autocomplete="off">
    </td>
  </tr>

Comment 1

[:glob ✱]

Attachment: test case

Comment 2

[Robert Longson [:longsonr]]

Per https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion we ignore autocomplete="off" for login fields and it looks like these are such. See also bug 1025703

Comment 3

[Dimi Lee [:dimi]]

As mentioned in Comment 2, we ignore autocomplete="off".
There is a pref you can turn on to NOT autofill when autocomplete="off" (See Bug 1531135).