1821019 - [IT][euronics.it] Autofill dropdown is applied/displayed on "Security code" field and considered as a CC field

Status: VERIFIED FIXED

(Toolkit :: Form Autofill, defect, P2)

Description

[Hani Yacoub, Desktop QA]

Attachment: 2023-03-08_13h29_12.mp4

Found in

• 111.0-candidates

Affected versions

• 111.0-candidates

Tested platforms

• Affected platforms: Windows 10

Preconditions

• browser.search.region = IT
• extensions.formautofill.creditCards.supportedCountries = IT
• Have at least one CC already saved

Steps to reproduce

1. Reach the payment form on https://www.euronics.it/
2. Click on "Security Code" field

Expected result

• "Security code" field shouldn't be considered a CC number field.

Actual result

• Autofill dropdown is applied/displayed on "Security code" field and considered as a CC field.
• "Clear Autofill Form" is applied also on "Card Number" field.

Regression range

• Not a recent regression.

Additional notes

• Not reproducible on Chrome.

Comment 1

[Dimi Lee [:dimi]]

This happens because the security code field

<input type="text" class="form-control securityCode mat-input" id="securityCode"
name="dwfrm_billing_creditCardFields_securityCode" required="" aria-required="true" value="" maxlength="4">

matches this regexp (add)?(?:card|cc|acct).?(?:number|#|no|num|field)"
https://searchfox.org/mozilla-central/rev/e77d89c414eac63a295a2124600045775a6f4715/toolkit/components/formautofill/shared/HeuristicsRegExp.sys.mjs#525

This issue will be fixed in Bug 1825777 by not running regexp-based heuristics for fields that we use fathom already.

Comment 2

[Dimi Lee [:dimi]]

Attachment: Bug 1821019 - Support classifying cc-csc fields, but refrain from capturing or autofilling cc-csc fields r=#credential-management-reviewers

We do not intend to capture or autofill Card Security Code (CSC) fields.

The reason for adding "cc-csc" support is to enhance the accuracy of our heuristics.
For instance, if a credit card form contains a CSC field that aligns with both "cc-number"
and "cc-csc" heuristics, we would only classify the field as a "cc-number" field
without the application of the cc-csc heuristic. However, if we include the
cc-csc heuristic, we can use the results as a hint that this field might not be a "cc-number"
field.

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a1b004d47efb
Support classifying cc-csc fields, but refrain from capturing or autofilling cc-csc fields r=mtigley,credential-management-reviewers

Comment 4

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/a1b004d47efb

Comment 5

[Alin Ilea, Desktop Test Engineering]

Verified - Fixed in latest Nightly 116.0a1 (15-06-2023). The autofill dropdown is no longer triggered for the Security Code field.