2061770 - [meta] CVV/CVC support in credit card autofill

Status: ASSIGNED

(Toolkit :: Form Autofill, task, P2)

Description

[Micah [:mtigley] (she/her)]

Meta bug tracking support for the card security code (cc-csc, commonly called CVV/CVC) in credit card autofill, with a focus on the front-end/UI pieces.

Today cc-csc is detected by the autofill heuristics so that credit card sections parse correctly, but the value is deliberately never saved and never filled:

• FormAutofillSection.sys.mjs skips cc-csc when building a record to save.
• shouldAutofillField() returns false for cc-csc.
• cc-csc is not part of VALID_CREDIT_CARD_FIELDS in FormAutofillStorageBase.sys.mjs.

The dependent bugs cover extending heuristics coverage to CVC fields and surfacing saved-CVC state in the payment methods UI (read-only lists, the add/edit payment method dialog, and saved-CVC indication).

This work is gated behind the extensions.formautofill.creditCards.cvv.enabled pref, which defaults to false.