1914811 - Saved password exception emptied on firefox exit

Status: NEW

(Toolkit :: Data Sanitization, defect, P3)

Description

[krapbucket]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0

Steps to reproduce:

1. go to a website that requires login (e.g. github)
2. when firefox prompt "save password for <website>", I selected "never save"
3. URL of website was saved in the saved password exceptions list in settings (good)
4. exist firefox
5. start firefox
6. look in settings > saved password exceptions list, and found it was empty (bad)

My settings under privacy & security

• enhance tracking production = strict
• cookies & site data > delete cookies and site data when firefox is closed = enabled
• ask to save passwords = enabled
• fill username and password automatically = enabled
• Show alerts about passwords for breached websites = enabled
• (all other settings in "passwords" section is disabled)
• history / Clear history when Firefox closes = enabled
• history / Clear history when Firefox closes / settings = all enabled

Actual results:

After firefox restart, website URL was not saved in password exception list.

Expected results:

After firefox restart, website URL was should still be in password exception list.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Toolkit::Data Sanitization' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Harshit Sohaney [:hsohaney]]

This is the intended behavior (if a little unexpected). You have all options ticked for clearing on shutdown --> this includes siteSettings. All permissions related to sites come under this branch, including exclusion permissions (we store the "never save" action as a permission keyed by the site). This is why your exception is cleared.

As an alternative:

Uncheck the siteSettings options from your clear on shutdown settings, found in about:preferences#privacy -> history -> Clear history when Firefox closes -> settings. This should keep your exceptions intact. if you wish to remove specific permissions

However, we do know that this is a bit weird since exceptions should have their own clearing mechanism. It's on the roadmap to make this clearer for users. We'll keep this bug open to keep track of problems that this confusion causes!

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The bug has a release status flag that shows some version of Firefox is affected, thus it will be considered confirmed.