1840934 - When a form is submitted by pressing Enter with FlorisBoard keyboard, JS reads password mask bullets as the value of an input

Status: RESOLVED INCOMPLETE

(Firefox for Android :: Browser Engine, defect)

Description

[Val Packett]

Attachment: screencast.mp4

Steps to reproduce

0. Install the https://florisboard.org open source Android keyboard
1. Go to https://jsbin.com/lutimegade/1 (source below)
2. Type something into the password input
3. Press the submit key on the keyboard

Expected behavior

The entered text should pop up on the alert()

Actual behavior

Password mask characters (bullet characters) appear instead!

And they permanently become the input's value. Even erasing some characters, adding new text, and then submitting via touching the button would show bullets from the first entered string and actual text from the second one.

This doesn't happen with the same keyboard in Chromium-based browsers, nor with the AOSP keyboard in Firefox. This is quite an interesting bug :D

Device information

• Firefox version: 114.2.0 Build #2015957435, f986bd245f+
• Android OS version: 13 (LineageOS 20)
• FlorisBoard version: 0.3.16

Reproducer source

<form>
  <input type="password" />
  <button>wheeee</button>
</form>

document.querySelector("form").onsubmit = (e) => {
  e.preventDefault();
  alert(document.querySelector("input").value);
};

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:jonalmeida, could you have a look please?

For more information, please visit BugBot documentation.

Comment 2

[Jeff Boek [:boek]]

Hey Val, thanks for reporting this. Do you happen to know if this happens with other custom keyboards or just FlorisBoard? 🤔

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

A needinfo is requested from the reporter, however, the reporter is inactive on Bugzilla. Given that the bug is still UNCONFIRMED, closing the bug as incomplete.

For more information, please visit BugBot documentation.

Comment 4

[Val Packett]

I haven't seen it happen with other keyboards, no.