Closed Bug 1840934 Opened 11 months ago Closed 4 months ago

When a form is submitted by pressing Enter with FlorisBoard keyboard, JS reads password mask bullets as the value of an input

Categories

(Fenix :: Browser Engine, defect)

Firefox 114
All
Android
defect

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: val, Unassigned)

Details

Attachments

(1 file)

Attached video screencast.mp4

Steps to reproduce

  1. Install the https://florisboard.org open source Android keyboard
  2. Go to https://jsbin.com/lutimegade/1 (source below)
  3. Type something into the password input
  4. Press the submit key on the keyboard

Expected behavior

The entered text should pop up on the alert()

Actual behavior

Password mask characters (bullet characters) appear instead!

And they permanently become the input's value. Even erasing some characters, adding new text, and then submitting via touching the button would show bullets from the first entered string and actual text from the second one.

This doesn't happen with the same keyboard in Chromium-based browsers, nor with the AOSP keyboard in Firefox. This is quite an interesting bug :D

Device information

  • Firefox version: 114.2.0 Build #2015957435, f986bd245f+
  • Android OS version: 13 (LineageOS 20)
  • FlorisBoard version: 0.3.16

Reproducer source

<form>
  <input type="password" />
  <button>wheeee</button>
</form>
document.querySelector("form").onsubmit = (e) => {
  e.preventDefault();
  alert(document.querySelector("input").value);
};

The severity field is not set for this bug.
:jonalmeida, could you have a look please?

For more information, please visit BugBot documentation.

Flags: needinfo?(jonalmeida942)

Hey Val, thanks for reporting this. Do you happen to know if this happens with other custom keyboards or just FlorisBoard? 🤔

Flags: needinfo?(val)
Severity: -- → S4
Flags: needinfo?(jonalmeida942)

A needinfo is requested from the reporter, however, the reporter is inactive on Bugzilla. Given that the bug is still UNCONFIRMED, closing the bug as incomplete.

For more information, please visit BugBot documentation.

Status: UNCONFIRMED → RESOLVED
Closed: 4 months ago
Flags: needinfo?(val)
Resolution: --- → INCOMPLETE

I haven't seen it happen with other keyboards, no.

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: