1695823 - Primary password is requested for a login form when autofill logins is disabled

Status: NEW

(Toolkit :: Password Manager, defect, P3)

Description

[alpha-beta-release]

User Agent: Mozilla/5.0 (X11; Linux armv7l; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

hi,

in Firefox-ESR i enabled "Use a master password" to protect my passwords.
in addition, i disabled "Autofill Login and Password" in the preferences, because i not always want to login automtically to a website i visit, when i only want to watch the content that is available without login.

if i start firefox without previous entering the master password once and i visit a website for that a password is stored in firefox, it pops up a dialog to enter the master password.

even there are no fields visible to enter login credentials on the website or i not "focused" the fields for login.
this can be very annoying, when you got asked over and over again each time you visit those websites.

Actual results:

actually i get asked for entering master password over and over again when i visit a website, where a password is stored for in firefox,
even there are no fields visible to enter login credentials and/or i not set the focus to any login credential fields on the website.

Expected results:

if the option "Autofill Login and Password" in the preferences of firefox is disabled,
then i expected to get asked for entering master password only if i set the focus to a field to enter website login credentials

Comment 1

[Tim Giles [:tgiles] | PTO July 3 - July 14]

Hi, thanks for filing this. Do you happen to have Sync enabled? If so, we need to prompt for your Primary Password to sync logins. Syncs happen in the background, shortly after startup, and periodically afterwards. This tends to be the cause of these "random" prompts appearing.

Comment 2

[alpha-beta-release]

no, i do not use sync functionality.

Comment 3

[Tim Giles [:tgiles] | PTO July 3 - July 14]

Thanks for that update. Normally Sync is the easy culprit for determining "random" primary password prompts. In order to help us debug the issue further, could you attach the debug log when you visit one of these sites? An instructional video for attaching debug logging can be found on our wiki.

Additionally, do you happen to have a certificate associated with your particular ESR Firefox? I don't need to know specifics, I just need to know if you happen to have one associated with your account. You can find your certificates by navigating to about:preferences and searching for "certificates" and then selecting the "View Certificates" button. In the window that appears, select "Your Certificates".

Comment 4

[alpha-beta-release]

i have not added any certificates manually.

here logs of two websites:
(I deleted stuff where I thought it might contain secret/confidential/private stuff - marked as 'deleted!')

19:28:07.525 browser.startup.average_time - Truncating float/double number.
19:28:07.540
[Exception... "Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIAppStartup.secondsSinceLastOSRestart]"  nsresult: "0x80004001 (NS_ERROR_NOT_IMPLEMENTED)"  location: "JS frame :: resource:///modules/BrowserGlue.jsm :: _collectStartupConditionsTelemetry :: line 1680"  data: no] BrowserGlue.jsm:1680:9
19:28:07.594 Unknown category for SetEventRecordingEnabled: fxmonitor
19:28:08.978
Unknown Collection "main/messaging-experiments" RemoteSettingsClient.jsm:155
19:28:09.085 a11y.sitezoom - Unknown scalar.
19:28:09.102 Login storage: Opening database at /home/pi/.mozilla/firefox/deleted!.default-esr/logins.json storage-json.js:96:14
19:28:09.120 LoginManager: initializationPromise is resolved, updating isMasterPasswordSet in sharedData LoginManager.jsm:99:11
19:28:14.568 Key event not available on some keyboard layouts: key=“r” modifiers=“accel,alt” id=“key_toggleReaderMode” browser.xhtml
19:28:14.568 Key event not available on some keyboard layouts: key=“i” modifiers=“accel,alt,shift” id=“key_browserToolbox” browser.xhtml

19:28:30.742
Some cookies are misusing the recommended “sameSite“ attribute 9
19:28:30.843
Cc[aContract] is undefined XPCOMUtils.jsm:215
19:28:32.414 LoginManagerChild: onDOMFormHasPassword, visibilityState: visible isMasterPasswordSet: true LoginManagerChild.jsm:736:8
19:28:32.428 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:68:9
19:28:32.431 LoginManagerChild: _processDOMFormHasPasswordEvent: <unavailable> <unavailable> LoginManagerChild.jsm:755:8
19:28:32.435 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:68:9
19:28:32.511 LoginRecipes: Resetting recipes with defaults: chrome://passwordmgr/content/recipes.json LoginRecipes.jsm:107:9
19:28:32.512 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:68:9
19:28:32.987 LoginRecipes: Adding recipe: 
Object { description: "okta uses a hidden password field to disable filling", hosts: (1) […], passwordSelector: "#pass-signin", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:28:33.003 LoginRecipes: Adding recipe: 
Object { description: "anthem uses a hidden password and username field to disable filling", hosts: (1) […], passwordSelector: "#LoginContent_txtLoginPass", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:28:33.009 LoginRecipes: Adding recipe: 
Object { description: "An ephemeral password-shim field is incorrectly selected as the username field.", hosts: (1) […], usernameSelector: "#login-account", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:28:33.016 LoginRecipes: Adding recipe: 
Object { description: "Tibia uses type=password for its username field and puts the email address before the password field during registration", hosts: (1) […], usernameSelector: "#accountname, input[name='loginname']", passwordSelector: "#password1, input[name='loginpassword']", pathRegex: /^\/account\// }
LoginRecipes.jsm:151:9
19:28:33.020 LoginRecipes: Adding recipe: 
Object { description: "Username field will be incorrectly captured in the change password form (bug 1243722)", hosts: (1) […], notUsernameSelector: "#password_strength", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:28:33.025 LoginRecipes: Adding recipe: 
Object { description: "United uses a useless password field plus one per frequent flyer number during checkin. Don't save any of them (Bug 1330810)", hosts: (1) […], notPasswordSelector: "input[type='password']", pathRegex: /^\/travel\/checkin\/changefqtv.aspx/ }
LoginRecipes.jsm:151:9
19:28:33.031 LoginRecipes: Adding recipe: 
Object { description: "Gogo In-Flight uses a password field for credit card numbers on the same page as login", hosts: (1) […], notPasswordSelector: "#cardNumber", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:28:33.035 LoginRecipes: Adding recipe: 
Object { description: "The Fortuneo bank uses a different form for each input, defeating the password manager (Bug 1433754)", hosts: (1) […], pathRegex: /\/identification\.jsp$/, usernameSelector: "input[name='LOGIN']" }
LoginRecipes.jsm:151:9
19:28:33.039 LoginRecipes: Adding recipe: 
Object { description: "Merrill's benefits website has six type=password fields which is over our threshold for filling (Bug 1538026)", hosts: (1) […], usernameSelector: "#SFText_UserName", passwordSelector: "#SFText_Password", pathRegex: /^\/login\/login$/ }
LoginRecipes.jsm:151:9
19:28:33.045 LoginRecipes: Adding recipe: 
Object { description: "Bug 1595339: Checking account type=password fields get login suggestions", hosts: (1) […], notPasswordSelector: "#bankRoutingNo, #validateBankRoutingNo, #bankAcctNo, #validateBankAcctNo", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:28:33.049 LoginManager: searchLoginsAsync: 
Object { origin: "https://www.gmx.net", schemeUpgrades: true, acceptDifferentSubdomains: true }
LoginManager.jsm:492:9
19:28:33.053 Login storage: searchLoginsAsync: 
Object { origin: "https://www.gmx.net", schemeUpgrades: true, acceptDifferentSubdomains: true }
storage-json.js:408:10
19:28:33.064 Login storage: _searchLogins: returning 2 logins for 
Object { origin: "https://www.gmx.net" }
 with options 
Object { acceptDifferentSubdomains: true, schemeUpgrades: true }
storage-json.js:594:10
19:28:35.322 LoginRecipes: _clearRecipeCache LoginRecipes.jsm:222:9
19:28:35.326 LoginManagerChild: onDOMFormHasPassword, visibilityState: visible isMasterPasswordSet: true LoginManagerChild.jsm:736:8
19:28:35.328 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:68:9
19:28:35.329 LoginManagerChild: _processDOMFormHasPasswordEvent: <unavailable> <unavailable> LoginManagerChild.jsm:755:8
19:28:35.331 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:68:9
19:28:35.334 LoginManagerParent: deferring sendLoginDataToChild for https://www.gmx.net LoginManagerParent.jsm:377:10
19:28:35.444 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:68:9
19:28:35.858 uncaught exception: Object
19:28:36.860 [AdService] Version: 2.3.1 homepage.bundle.js:1:95354
19:28:37.420 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.429 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.474 TIF is checking consent for permissionFeatureType : 'tgp' in order to trigger 'Traffic-Pixel'. 2690.js:46:122
19:28:37.480 TIF has NO consent for permissionFeatureType : 'tgp'. 2690.js:46:23
19:28:37.481 TIF tracks for TGP/WTR anonymously. 2690.js:39:70
19:28:37.486 TIF is checking consent for permissionFeatureType : 'agofTracking' in order to trigger 'AGOF-Tracking'. 2690.js:46:122
19:28:37.492 TIF has NO consent for permissionFeatureType : 'agofTracking'. 2690.js:46:23
19:28:37.499 NGUserID TGP-OPT-OUT homepage.bundle.js:1:105831
19:28:37.593 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.600 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.626 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.639 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.674 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.682 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.722 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.730 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.761 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.769 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.786 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.793 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.813 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.820 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.839 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.845 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.861 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.868 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.884 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.903 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.920 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.930 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.953 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.960 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:37.986 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:37.996 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.017 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.024 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.045 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.053 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.069 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.077 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.094 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.101 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.144 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.153 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.172 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.180 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:38.201 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:38.208 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:40.018 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:40.025 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:40.405
Request to access cookie or storage on “<URL>” was blocked because we are blocking all third-party storage access requests and content blocking is enabled. 11
19:28:40.752 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:40.759 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:41.028 Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. connector.min.js:1:101868
19:28:41.060 Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. 3 connector.min.js:1:101868
19:28:41.303 Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. connector.min.js:1:101868
19:28:41.952 Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. 12 connector.min.js:1:101868
19:28:42.781 Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. 2 connector.min.js:1:101868
19:28:42.908 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:42.914 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:42.993 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:42.999 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:44.031 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:44.038 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:44.857 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:44.865 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:46.494 https://js.ui-portal.de/netid/cmp/config/gmx/config.json app.js:1:94198
19:28:46.495 <unavailable> app.js:1:94261
19:28:46.522 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:46.528 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:46.759 handleInit bundle.min.js:2:44096
19:28:46.776 <unavailable> bundle.min.js:2:44096
19:28:46.782 init event in getData bundle.min.js:2:44096
19:28:46.786 <unavailable> bundle.min.js:2:44096
19:28:47.429 This page uses the non standard property “zoom”. Consider using calc() in the relevant property values, or using “transform” along with “transform-origin: 0 0”. generic_adition_simple_6.html
19:28:47.444 NO_TPID bundle.min.js:2:44096
19:28:47.564 deleted! bundle.min.js:2:44096
19:28:47.584 tcGvlVersion: 79 bundle.min.js:2:44096
19:28:47.587 this.cmpConfig.resurface.on: true bundle.min.js:2:44096
19:28:47.590 this.cmpConfig.resurface.minimalGvlVersion: 76 bundle.min.js:2:44096
19:28:47.593 shouldResurface: false bundle.min.js:2:44096
19:28:47.607 Default values set in tcModel bundle.min.js:2:44096
19:28:47.861 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:47.869 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:47.980 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:47.986 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:48.462 downloadable font: download failed (font-family: "RobotoMedium" style:normal weight:400 stretch:100 src index:1): status=2152398850 source: https://img.ui-portal.de/ci/gmx/global/fonts/roboto/Roboto-Medium-webfont.woff
19:28:48.756 downloadable font: download failed (font-family: "RobotoRegular" style:normal weight:400 stretch:100 src index:1): status=2152398850 source: https://img.ui-portal.de/ci/gmx/global/fonts/roboto/Roboto-Regular-webfont.woff
19:28:50.559 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.565 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.571 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.578 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.582 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.591 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.594 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.601 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.607 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.617 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.627 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.637 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.644 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.653 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8
19:28:50.666 LoginManagerChild: onStateChange handled: <unavailable> LoginManagerChild.jsm:163:8
19:28:50.674 LoginManagerChild: _onNavigation: root elements approx size: 0 document: <unavailable> LoginManagerChild.jsm:1496:8

19:29:02.946 Login crypto: Failed to decrypt string: deleted! (NS_ERROR_NOT_AVAILABLE) crypto-SDR.js:184:12
19:29:02.949 Login crypto: Prompted for a master password, notifying for passwordmgr-crypto-loginCanceled crypto-SDR.js:302:10
19:29:02.951 LoginManagerParent: Got deferred sendLoginDataToChild notification: passwordmgr-crypto-loginCanceled LoginManagerParent.jsm:392:14
19:29:02.954 LoginManagerParent: User cancelled master password prompt. LoginManagerParent.jsm:202:12
19:29:02.954
NS_ERROR_ABORT: User canceled master password entry crypto-SDR.js:195
19:29:02.957 LoginManagerParent: sendLoginDataToChild: 0 deduped logins LoginManagerParent.jsm:434:8
19:29:02.959 LoginRecipes: cacheRecipes: for: https://www.gmx.net LoginRecipes.jsm:234:9
19:29:02.963 LoginManagerChild: _fillForm <unavailable> LoginManagerChild.jsm:2045:8
19:29:02.966 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
19:29:02.973 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
19:29:02.978 LoginManagerChild: Username field  <unavailable> has name/value/autocomplete: username / <empty string> / <empty string> LoginManagerChild.jsm:1324:10
19:29:02.980 LoginManagerChild: Password field <unavailable> has name:  password LoginManagerChild.jsm:1367:10
19:29:02.983 LoginManagerChild: _fillForm: Attaching event listeners to usernameField LoginManagerChild.jsm:2399:12
19:29:02.985 LoginRecipes: cacheRecipes: for: https://www.gmx.net LoginRecipes.jsm:234:9
19:29:02.986 LoginManagerChild: _fillForm <unavailable> LoginManagerChild.jsm:2045:8
19:29:02.987 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
19:29:02.989 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
19:29:02.990 LoginManagerChild: (form ignored -- no password fields.) LoginManagerChild.jsm:1202:10
19:29:09.279 Navigated to chrome://extensions/content/dummy.xhtml

on gmx.net i was asked to enter master password, but i not clicked to the login fields.
i just wanted to watch the news. no need to ask me for master password at this time.

19:32:06.076 browser.startup.average_time - Truncating float/double number.
19:32:06.091
[Exception... "Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIAppStartup.secondsSinceLastOSRestart]"  nsresult: "0x80004001 (NS_ERROR_NOT_IMPLEMENTED)"  location: "JS frame :: resource:///modules/BrowserGlue.jsm :: _collectStartupConditionsTelemetry :: line 1680"  data: no] BrowserGlue.jsm:1680:9
19:32:06.155 Unknown category for SetEventRecordingEnabled: fxmonitor
19:32:07.614
Unknown Collection "main/messaging-experiments" RemoteSettingsClient.jsm:155
19:32:07.934 a11y.sitezoom - Unknown scalar.
19:32:07.946 Login storage: Opening database at /home/pi/.mozilla/firefox/deleted!.default-esr/logins.json storage-json.js:96:14
19:32:07.953 LoginManager: initializationPromise is resolved, updating isMasterPasswordSet in sharedData LoginManager.jsm:99:11
19:32:22.034
Cc[aContract] is undefined XPCOMUtils.jsm:215
19:32:22.696 This page uses the non standard property “zoom”. Consider using calc() in the relevant property values, or using “transform” along with “transform-origin: 0 0”. www.verleihshop.de
19:32:22.793 Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. modernizr.js:4:1720
19:32:22.930 The character encoding declaration of the HTML document was not found when prescanning the first 1024 bytes of the file. When viewed in a differently-configured browser, this page will reload automatically. The encoding declaration needs to be moved to be within the first 1024 bytes of the file. www.verleihshop.de:14
19:32:22.941 LoginRecipes: Resetting recipes with defaults: chrome://passwordmgr/content/recipes.json LoginRecipes.jsm:107:9
19:32:23.000 LoginRecipes: Adding recipe: 
Object { description: "okta uses a hidden password field to disable filling", hosts: (1) […], passwordSelector: "#pass-signin", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:32:23.001 LoginRecipes: Adding recipe: 
Object { description: "anthem uses a hidden password and username field to disable filling", hosts: (1) […], passwordSelector: "#LoginContent_txtLoginPass", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:32:23.002 LoginRecipes: Adding recipe: 
Object { description: "An ephemeral password-shim field is incorrectly selected as the username field.", hosts: (1) […], usernameSelector: "#login-account", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:32:23.002 LoginRecipes: Adding recipe: 
Object { description: "Tibia uses type=password for its username field and puts the email address before the password field during registration", hosts: (1) […], usernameSelector: "#accountname, input[name='loginname']", passwordSelector: "#password1, input[name='loginpassword']", pathRegex: /^\/account\// }
LoginRecipes.jsm:151:9
19:32:23.003 LoginRecipes: Adding recipe: 
Object { description: "Username field will be incorrectly captured in the change password form (bug 1243722)", hosts: (1) […], notUsernameSelector: "#password_strength", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:32:23.004 LoginRecipes: Adding recipe: 
Object { description: "United uses a useless password field plus one per frequent flyer number during checkin. Don't save any of them (Bug 1330810)", hosts: (1) […], notPasswordSelector: "input[type='password']", pathRegex: /^\/travel\/checkin\/changefqtv.aspx/ }
LoginRecipes.jsm:151:9
19:32:23.005 LoginRecipes: Adding recipe: 
Object { description: "Gogo In-Flight uses a password field for credit card numbers on the same page as login", hosts: (1) […], notPasswordSelector: "#cardNumber", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:32:23.005 LoginRecipes: Adding recipe: 
Object { description: "The Fortuneo bank uses a different form for each input, defeating the password manager (Bug 1433754)", hosts: (1) […], pathRegex: /\/identification\.jsp$/, usernameSelector: "input[name='LOGIN']" }
LoginRecipes.jsm:151:9
19:32:23.006 LoginRecipes: Adding recipe: 
Object { description: "Merrill's benefits website has six type=password fields which is over our threshold for filling (Bug 1538026)", hosts: (1) […], usernameSelector: "#SFText_UserName", passwordSelector: "#SFText_Password", pathRegex: /^\/login\/login$/ }
LoginRecipes.jsm:151:9
19:32:23.006 LoginRecipes: Adding recipe: 
Object { description: "Bug 1595339: Checking account type=password fields get login suggestions", hosts: (1) […], notPasswordSelector: "#bankRoutingNo, #validateBankRoutingNo, #bankAcctNo, #validateBankAcctNo", pathRegex: undefined }
LoginRecipes.jsm:151:9
19:32:23.007 LoginManager: searchLoginsAsync: 
Object { origin: "https://www.verleihshop.de", schemeUpgrades: true, acceptDifferentSubdomains: true }
LoginManager.jsm:492:9
19:32:23.008 Login storage: searchLoginsAsync: 
Object { origin: "https://www.verleihshop.de", schemeUpgrades: true, acceptDifferentSubdomains: true }
storage-json.js:408:10
19:32:23.015 Login storage: _searchLogins: returning 1 logins for 
Object { origin: "https://www.verleihshop.de" }
 with options 
Object { acceptDifferentSubdomains: true, schemeUpgrades: true }
storage-json.js:594:10
19:32:36.063 Login crypto: Failed to decrypt string: deleted! (NS_ERROR_NOT_AVAILABLE) crypto-SDR.js:184:12
19:32:36.065 Login crypto: Prompted for a master password, notifying for passwordmgr-crypto-loginCanceled crypto-SDR.js:302:10
19:32:36.066
NS_ERROR_ABORT: User canceled master password entry crypto-SDR.js:195
19:32:36.067 LoginManagerParent: User cancelled master password prompt. LoginManagerParent.jsm:202:12
19:32:36.069 LoginManagerParent: sendLoginDataToChild: 0 deduped logins LoginManagerParent.jsm:434:8
19:32:37.985 Key event not available on some keyboard layouts: key=“r” modifiers=“accel,alt” id=“key_toggleReaderMode” browser.xhtml
19:32:37.985 Key event not available on some keyboard layouts: key=“i” modifiers=“accel,alt,shift” id=“key_browserToolbox” browser.xhtml
19:33:12.339 Navigated to chrome://extensions/content/dummy.xhtml

at verleihshop.de i was asked for master password. but on that website there are no fields for login at all at this stage. so no need to ask me for master password at all.

no add-ons/expensions were loaded or activated.

Comment 5

[Sam Foster [:sfoster] (he/him)]

Looking at the logs and the code in LoginManagerChild.jsm, it looks like the request for the primary password happens before we determine if we are going to autofill or not. If login autofill is disabled I can't think of a reason why we would need the primary password as we can't going to need the decrypted values to autofill at this time.

Comment 6

[alpha-beta-release]

here an other log of a link to a PDF file,
where i get asked to enter the master password, even there is absolute nothing to log in:
(https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2835/BCM2835-ARM-Peripherals.pdf)

14:20:58.591 browser.startup.average_time - Truncating float/double number.
14:20:58.606
[Exception... "Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIAppStartup.secondsSinceLastOSRestart]"  nsresult: "0x80004001 (NS_ERROR_NOT_IMPLEMENTED)"  location: "JS frame :: resource:///modules/BrowserGlue.jsm :: _collectStartupConditionsTelemetry :: line 1680"  data: no] BrowserGlue.jsm:1680:9
14:20:58.661 Unknown category for SetEventRecordingEnabled: fxmonitor
14:21:00.180
Unknown Collection "main/messaging-experiments" RemoteSettingsClient.jsm:155
14:21:00.331 a11y.sitezoom - Unknown scalar.
14:21:00.345 Login storage: Opening database at /home/pi/.mozilla/firefox/!deleted!.default-esr/logins.json storage-json.js:96:14
14:21:00.350 LoginManager: initializationPromise is resolved, updating isMasterPasswordSet in sharedData LoginManager.jsm:99:11
14:21:16.978
Cc[aContract] is undefined XPCOMUtils.jsm:215
14:21:17.207 LoginManagerChild: onDOMInputPasswordAdded, visibilityState: visible isMasterPasswordSet: true LoginManagerChild.jsm:776:8
14:21:17.217 LoginFormFactory: Created non-form LoginForm for rootElement: <unavailable> LoginFormFactory.jsm:118:9
14:21:17.218 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:127:9
14:21:17.220 LoginManagerChild:  _processDOMInputPasswordAddedEvent: <unavailable> <unavailable> LoginManagerChild.jsm:800:8
14:21:17.221 LoginManagerChild: Creating a DeferredTask to call _fetchLoginsFromParentAndFillForm soon LoginManagerChild.jsm:806:10
14:21:17.222 LoginFormFactory: Created non-form LoginForm for rootElement: <unavailable> LoginFormFactory.jsm:118:9
14:21:17.223 LoginFormFactory: adding <unavailable> to root elements for <unavailable> LoginFormFactory.jsm:127:9
14:21:17.427 LoginManagerChild: Arming the onDOMInputPasswordAdded DeferredTask due to DOMContentLoaded LoginManagerChild.jsm:852:14
14:21:17.483 LoginManagerChild: Running deferred processing of onDOMInputPasswordAdded <unavailable> LoginManagerChild.jsm:818:14
14:21:17.584 Attempting to post a message to window with url "resource://pdf.js/web/viewer.html" and origin "resource://pdf.js^firstPartyDomain=raspberrypi.org" from a system principal scope with mismatched origin "[System Principal]".
14:21:17.592 LoginRecipes: Resetting recipes with defaults: chrome://passwordmgr/content/recipes.json LoginRecipes.jsm:107:9
14:21:17.612 Attempting to post a message to window with url "resource://pdf.js/web/viewer.html" and origin "resource://pdf.js^firstPartyDomain=raspberrypi.org" from a system principal scope with mismatched origin "[System Principal]". 3
14:21:17.648
Request to access cookie or storage on “<URL>” was blocked because we are blocking all third-party storage access requests and content blocking is enabled. 3
14:21:17.669 LoginRecipes: Adding recipe: 
Object { description: "okta uses a hidden password field to disable filling", hosts: (1) […], passwordSelector: "#pass-signin", pathRegex: undefined }
LoginRecipes.jsm:151:9
14:21:17.672 LoginRecipes: _clearRecipeCache LoginRecipes.jsm:222:9
14:21:17.683 LoginRecipes: Adding recipe: 
Object { description: "anthem uses a hidden password and username field to disable filling", hosts: (1) […], passwordSelector: "#LoginContent_txtLoginPass", pathRegex: undefined }
LoginRecipes.jsm:151:9
14:21:17.688 LoginRecipes: Adding recipe: 
Object { description: "An ephemeral password-shim field is incorrectly selected as the username field.", hosts: (1) […], usernameSelector: "#login-account", pathRegex: undefined }
LoginRecipes.jsm:151:9
14:21:17.693 LoginRecipes: Adding recipe: 
Object { description: "Tibia uses type=password for its username field and puts the email address before the password field during registration", hosts: (1) […], usernameSelector: "#accountname, input[name='loginname']", passwordSelector: "#password1, input[name='loginpassword']", pathRegex: /^\/account\// }
LoginRecipes.jsm:151:9
14:21:17.698 LoginRecipes: Adding recipe: 
Object { description: "Username field will be incorrectly captured in the change password form (bug 1243722)", hosts: (1) […], notUsernameSelector: "#password_strength", pathRegex: undefined }
LoginRecipes.jsm:151:9
14:21:17.702 LoginRecipes: Adding recipe: 
Object { description: "United uses a useless password field plus one per frequent flyer number during checkin. Don't save any of them (Bug 1330810)", hosts: (1) […], notPasswordSelector: "input[type='password']", pathRegex: /^\/travel\/checkin\/changefqtv.aspx/ }
LoginRecipes.jsm:151:9
14:21:17.706 LoginRecipes: Adding recipe: 
Object { description: "Gogo In-Flight uses a password field for credit card numbers on the same page as login", hosts: (1) […], notPasswordSelector: "#cardNumber", pathRegex: undefined }
LoginRecipes.jsm:151:9
14:21:17.711 LoginRecipes: Adding recipe: 
Object { description: "The Fortuneo bank uses a different form for each input, defeating the password manager (Bug 1433754)", hosts: (1) […], pathRegex: /\/identification\.jsp$/, usernameSelector: "input[name='LOGIN']" }
LoginRecipes.jsm:151:9
14:21:17.715 LoginRecipes: Adding recipe: 
Object { description: "Merrill's benefits website has six type=password fields which is over our threshold for filling (Bug 1538026)", hosts: (1) […], usernameSelector: "#SFText_UserName", passwordSelector: "#SFText_Password", pathRegex: /^\/login\/login$/ }
LoginRecipes.jsm:151:9
14:21:17.719 LoginRecipes: Adding recipe: 
Object { description: "Bug 1595339: Checking account type=password fields get login suggestions", hosts: (1) […], notPasswordSelector: "#bankRoutingNo, #validateBankRoutingNo, #bankAcctNo, #validateBankAcctNo", pathRegex: undefined }
LoginRecipes.jsm:151:9
14:21:17.722 LoginManager: searchLoginsAsync: 
Object { origin: "https://www.raspberrypi.org", schemeUpgrades: true, acceptDifferentSubdomains: true }
LoginManager.jsm:492:9
14:21:17.726 Login storage: searchLoginsAsync: 
Object { origin: "https://www.raspberrypi.org", schemeUpgrades: true, acceptDifferentSubdomains: true }
storage-json.js:408:10
14:21:17.735 Login storage: _searchLogins: returning 1 logins for 
Object { origin: "https://www.raspberrypi.org" }
 with options 
Object { acceptDifferentSubdomains: true, schemeUpgrades: true }
storage-json.js:594:10
14:21:18.427 LoginManagerChild: onLocationChange handled: https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2835/BCM2835-ARM-Peripherals.pdf <unavailable> LoginManagerChild.jsm:111:8
14:21:18.429 LoginManagerChild: _onNavigation: root elements approx size: 1 document: <unavailable> LoginManagerChild.jsm:1496:8
14:21:18.430 LoginManagerChild: _onFormSubmit <unavailable> LoginManagerChild.jsm:1522:8
14:21:18.433 LoginRecipes: getRecipes: falling back to a synchronous message for: https://www.raspberrypi.org LoginRecipes.jsm:266:9
14:21:18.693 LoginRecipes: cacheRecipes: for: https://www.raspberrypi.org LoginRecipes.jsm:234:9
14:21:18.696 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
14:21:18.697 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
14:21:18.699 LoginManagerChild: skipping password field (id/name is password  /  ) as value is too short: 0 LoginManagerChild.jsm:1184:12
14:21:18.700 LoginManagerChild: (form ignored -- no password fields.) LoginManagerChild.jsm:1202:10
14:21:18.831 PDF !deleted! [1.3 GPL Ghostscript 8.64 / PScript5.dll Version 5.2] (PDF.js: 2.5.179) viewer.js:1271:13
14:21:19.889 LoginManagerChild: onLocationChange handled: https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2835/BCM2835-ARM-Peripherals.pdf <unavailable> LoginManagerChild.jsm:111:8
14:21:19.889 LoginManagerChild: _onNavigation: root elements approx size: 1 document: <unavailable> LoginManagerChild.jsm:1496:8
14:21:19.891 LoginManagerChild: _onFormSubmit <unavailable> LoginManagerChild.jsm:1522:8
14:21:19.892 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
14:21:19.893 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
14:21:19.896 LoginManagerChild: skipping password field (id/name is password  /  ) as value is too short: 0 LoginManagerChild.jsm:1184:12
14:21:19.898 LoginManagerChild: (form ignored -- no password fields.) LoginManagerChild.jsm:1202:10
14:21:21.616 LoginManagerChild: onLocationChange handled: https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2835/BCM2835-ARM-Peripherals.pdf <unavailable> LoginManagerChild.jsm:111:8
14:21:21.617 LoginManagerChild: _onNavigation: root elements approx size: 1 document: <unavailable> LoginManagerChild.jsm:1496:8
14:21:21.617 LoginManagerChild: _onFormSubmit <unavailable> LoginManagerChild.jsm:1522:8
14:21:21.618 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
14:21:21.618 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
14:21:21.619 LoginManagerChild: skipping password field (id/name is password  /  ) as value is too short: 0 LoginManagerChild.jsm:1184:12
14:21:21.619 LoginManagerChild: (form ignored -- no password fields.) LoginManagerChild.jsm:1202:10
14:21:23.922 Login crypto: Failed to decrypt string: !deleted! (NS_ERROR_NOT_AVAILABLE) crypto-SDR.js:184:12
14:21:23.929 Login crypto: Prompted for a master password, notifying for passwordmgr-crypto-loginCanceled crypto-SDR.js:302:10
14:21:23.935
NS_ERROR_ABORT: User canceled master password entry crypto-SDR.js:195
14:21:23.936 LoginManagerParent: User cancelled master password prompt. LoginManagerParent.jsm:202:12
14:21:23.939 LoginManagerParent: sendLoginDataToChild: 0 deduped logins LoginManagerParent.jsm:434:8
14:21:23.948 LoginRecipes: cacheRecipes: for: https://www.raspberrypi.org LoginRecipes.jsm:234:9
14:21:23.953 LoginManagerChild: _fillForm <unavailable> LoginManagerChild.jsm:2045:8
14:21:23.955 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
14:21:23.956 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
14:21:23.961 LoginManagerChild: Username field  <unavailable> has name/value/autocomplete: <empty string> / 1 / off LoginManagerChild.jsm:1324:10
14:21:23.963 LoginManagerChild: Password field <unavailable> has name:  <empty string> LoginManagerChild.jsm:1367:10
14:21:23.967 LoginManagerChild: _fillForm: Attaching event listeners to usernameField LoginManagerChild.jsm:2399:12
14:21:28.730 LoginManagerChild: onLocationChange handled: https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2835/BCM2835-ARM-Peripherals.pdf <unavailable> LoginManagerChild.jsm:111:8
14:21:28.731 LoginManagerChild: _onNavigation: root elements approx size: 1 document: <unavailable> LoginManagerChild.jsm:1496:8
14:21:28.732 LoginManagerChild: _onFormSubmit <unavailable> LoginManagerChild.jsm:1522:8
14:21:28.733 LoginRecipes: _filterRecipesForForm <unavailable> LoginRecipes.jsm:285:9
14:21:28.733 LoginRecipes: getFieldOverrides: filtered recipes: 0 <unavailable> LoginRecipes.jsm:313:9
14:21:28.734 LoginManagerChild: skipping password field (id/name is password  /  ) as value is too short: 0 LoginManagerChild.jsm:1184:12
14:21:28.735 LoginManagerChild: (form ignored -- no password fields.) LoginManagerChild.jsm:1202:10
14:21:28.916 Navigated to chrome://extensions/content/dummy.xhtml
14:21:28.939 Webconsole context has changed