22847 - after submit, form contents will not change

Status: VERIFIED INVALID

(Core :: Layout: Form Controls, defect, P3)

Description

[Garth Wallace]

Once a form has been submitted, the actual contents of text and password fields
will no longer change if the user clicks in them and starts typing.

I found this when logging into mozillazine. I mistyped my password and
submitted. Mozillazine sent me an error message, and gave me the same two
fields, which were autofilled. I retyped my password (correctly this time) and
resubmitted, but got sent back to the same error message.

To double check I tried logging into my planetall.com account. I logged in
successfully, then went back and changed my username to "gwallace" instead
of "gwalla", and submitted. It logged me into my account again! The actual
contents of the field obviously were not changed, even though the widgets
themselves looked like they were working correctly (cursor behaved correctly,
glyphs inserted at the right positions, etc.)

I would have given this a lower priority, but it could be a very annoying (a
possible security risk) bug in multi-user settings, even more so than single-
user.

Comment 1

[Garth Wallace]

Almost forgot to mention: the first time, I said OK to "Remember
username/password". The second time, I said no to that and to "Remember this
decision". So autofill is probably not at fault here.

Comment 2

[karnaze (gone)]

Reassinging to SteveM.

Comment 3

[Stephen P. Morse]

Try that same experiment on 4.7 and you will get the same result.  The problem
is not in the browser but rather in the content that mozillazine is sending
back.  Here are a couple of experiments that I tried:

1. Fill in bad username and password:

   username: qwerty
   password: uiop

2. Submit, then hit back button.

   appearing on page:

      username: qwerty
      password: 8 asterisks

   do a view-source and in the form you will see:

      username: querty
      password: uii4RqLM

3. Then I filled in a good username and password and submitted it.  Then I hit
the back button.  Appearing on the page were the good username and password that
I entered.  But doing a view-source I obtained qwerty and uii4RqLM.

4. I did some other experiments and got other strange results in the content
sent back from mozillazien when I hit the back button after submitting a login.

CONCLUSION:  This is not a bug in mozilla -- it is strange behavior on the part
of mozillazine in the content it is sending back.  Try to reproduce this with
any other login form and you will not be able to.

Comment 4

[Garth Wallace]

I see what you mean. Hmm. Well, I'll just have to alert mozillazine to this
little problem. Thanks!

Comment 5

[bsharma]

Updating QA contact.

Comment 6

[Keyser Sose]

Mozillazine problem not ours. Verifying.