1941711 - Support wildcard URLs for password autofill (about:logins)

Status: NEW

(Firefox :: about:logins, enhancement)

Description

[David Hedlund]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0

Steps to reproduce:

1. Open Firefox and navigate to about:logins
2. Attempt to add a new login entry for a website with multiple URL variants (e.g., https://example.com, https://www.example.com)
3. Try to specify a wildcard URL that covers both non-www and www subdomains
4. Observe that there's no native way to handle both URL variants
5. Save separate entries for https://example.com and https://www.example.com
6. Attempt to use autofill on different URL variants of the website
7. Notice that when a site redirects from "https://" to "https://www." or vice versa, the saved login doesn't autofill

Actual results:

• Firefox requires separate login entries for https://example.com and https://www.example.com
• Users must manually manage multiple nearly identical login entries
• Autofill fails when URL slightly differs from stored exact match
• Increased complexity in password management, especially for sites with consistent www/non-www variations
• When sites redirect between "https://" and "https://www." variants, users need to manually update saved URLs, causing inconvenience

Expected results:

• Firefox should support wildcard patterns that inherently cover both www and non-www domains
• A single login entry like *example.com or https://*.example.com should automatically match:
  • https://example.com
  • https://www.example.com
• Autofill should work seamlessly across these URL variants, even when sites redirect between them
• about:logins interface should provide intuitive way to specify such flexible URL patterns
• Reduce redundant login entries for essentially the same website
• Eliminate the need for users to manually update URLs when sites redirect between "https://" and "https://www." variants

Additional context:
This enhancement would streamline password management, reduce user friction, and align Firefox with more flexible credential handling approaches. It would also significantly improve user experience by eliminating the need to update saved logins when websites redirect between www and non-www variants.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Firefox::about:logins' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Monica Chiorean]

Mark as new as this is an enhancement.