235765 - Password field is saved incorrectly due to javascript

Status: RESOLVED DUPLICATE of bug 257781

(Toolkit :: Password Manager, defect)

Description

[William Lynch]

User-Agent:       
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040225 Firefox/0.8

Basically, powerschool will take whatever password you enter into the form, and
then will run some javascript on it, which seems to take the md5sum of the
password input box, and then stores it to that same box. The problem is that I
would like it to save the un-encrypted password...

The encrypting happens when a link that reaches <a
href="javascript:doStudentLogin()">. this will submit the form, and changes the
password input box to the md5 of it. and then the save password stuff is called.

Reproducible: Always
Steps to Reproduce:
1. goto ps.stmarkshs.net
2. pick some username.
3. pick some password.
4. hit enter (the button)

Actual Results:  
The password input box is transformed into the md5sum of it due to javascript.
the save password feature of mozilla then saves the incorrect password.

Expected Results:  
It should have saved the password before the javascript attacked it. since the
javascript doesn't check to see that its already a md5sum or anything.

Possibly a solution would be to allow a person to lock the current user name and
password (so it doesn't get automatically changed?)

Comment 1

[Jason Barnabe (np)]

I'm guessing this is invalid because the data is only saved once the form is
submitted. But right or wrong, the behaviour is also in Seamonkey, so moving it
there.

Comment 2

[William Lynch]

I realize that its saved once submitted, but the main point in the bug is that I
feel that it should be saved as a password when the submit button is hit, since
that is when the user's version of the datas input is complete.

Comment 3

[Trevan]

This looks like a duplicate of bug #212617

Comment 4

[Daniel Veditz [:dveditz]]

*** This bug has been marked as a duplicate of 212617 ***

Comment 5

[Daniel Veditz [:dveditz]]

Judging by the original user-agent this should have been filed as a Firefox bug,
and since Firefox and the Suite have different password manager implementations
it's useful to have a bug on each product. Perhaps simply changing when an event
is fired will magically fix both, but probably there will be separate fixes
required.

Reopening and changing product.

Comment 6

[Ed Lee :Mardak]

Bug 257781 is the same but seems to have gotten more activity.

*** This bug has been marked as a duplicate of 257781 ***