Closed Bug 258364 Opened 20 years ago Closed 19 years ago

Firefox form handler remembers Credit Card Numbers

Categories

(Toolkit :: Form Manager, defect)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: james, Assigned: bugs)

Details

(Whiteboard: [sg:needinfo])

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040806 Firefox/0.9.3
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040806 Firefox/0.9.3

I went to McDonalds again today ... As usual I bought time on their wireless
network while my son played.  Going down the form when I got the the Line to
enter my credit card number and poof.  My card number appeared in the tool tips
box.  

I checked in the file .mozilla/firefox/defaultxxxxx/  and was unable to find a
clear text copy but the very fact that my number is remembered at all when I
specifically clicked "Do not remember the data filled in" bothers the bejesus
out of me.  

Reproducible: Always
Steps to Reproduce:
1.  Fill out a form with a credit card number.
2.  Go to the next page.
3.  Come back again to the same form and start to enter your card number... poof
it appears as a tool tip.

Actual Results:  
My CC number appears as a tool tip.  

Expected Results:  
Not remembered the form data like I asked it to.

*** This bug has been marked as a duplicate of 188285 ***
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Not so fast -- the reporter says he turned off the Tools / Options / "Saved Form
Information" / "Save information I enter in weg page forms and the Search bar"
preference.  If true, this is not a dup of bug 188285.  Reopening to get to the
truth.

James, can you say exactly what option you turned off?

/be
Status: RESOLVED → UNCONFIRMED
Resolution: DUPLICATE → ---
Form controls and Password controls are not the same thing. If the user disabled
one and entered information into the other, it's quite possible that it was
saved.  Without a testcase or better explanation of the steps to reproduce, I
can't do much here. 
sorry about that. my last comment was totally wrong. I misunderstood the problem. 

I've checked through all of our form sample pages and cannot reproduce a case
where form information is saved which is not supposed to be. disabling form data
collection works on all of my testcases. See
http://www.mozilla.org/wallet/samples/sample2.html  If there are realworld test
site where this is not working, please post a URL. Thanks.
Whiteboard: [sg:needinfo]
(In reply to comment #4)
> sorry about that. my last comment was totally wrong. I misunderstood the problem. 
> 
> I've checked through all of our form sample pages and cannot reproduce a case
> where form information is saved which is not supposed to be. disabling form data
> collection works on all of my testcases. See
> http://www.mozilla.org/wallet/samples/sample2.html  If there are realworld test
> site where this is not working, please post a URL. Thanks.
> 

(In reply to comment #4)
> sorry about that. my last comment was totally wrong. I misunderstood the problem. 
> 
> I've checked through all of our form sample pages and cannot reproduce a case
> where form information is saved which is not supposed to be. disabling form data
> collection works on all of my testcases. See
> http://www.mozilla.org/wallet/samples/sample2.html  If there are realworld test
> site where this is not working, please post a URL. Thanks.
> 

The site where I have had it "work" was of all places at a McDonalds.  This was
in fact the first time I'd seen it happen.  If local to you they don't have this
system that they use I'm at a bit of a loss.  They use the Wayport system for
allowing users to "purchase" internet time.  One note is that the system claims
to only work with IE 5.5 or better.  Since Firefox is better It works fine.  

Sorry this didn't get to you faster... I replied via mail and my mail server
must have screwed up.  


James, please answer as many of these questions as you can to help me figure out
what the problem is.

* Can you save a copy of the page where this happens and attach it to this bug
report?

* Is "Save information I enter in forms and the search bar" checked in privacy
options?  How about "Save passwords"?

* Does this still happen with a recent version of Firefox?

>Sorry this didn't get to you faster... I replied via mail and my mail server
>must have screwed up.  

Replying to bugmail doesn't work; you have to visit the bug URL using a web
browser and use the form to add comments.
Whiteboard: [sg:needinfo] → [sg:needinfo] waiting for info from reporter
I'll copy the mail requested questions and answers, inline.

* Can you save a copy of the page where this happens and attach it to this bug
report?

No, since the original filing was so long ago Wayport has changed how they
operate, I now purchase time, via my cell phone bill usable with them.  

* Is "Save information I enter in forms a.d the search bar" checked in privacy
options?  How about "Save passwords"?

It wasn't at the time I was afraid of it to be honest.  

* Does this still happen with a recent version of Firefox?

It appears that it could but it seems a number of sites I've been to recently
appear to be using javascript to actively block this kind of "memory aid".  I
don't have a test case to verify one way or the other.  Though nothing current
or new does retain any of this information.  However do to an unrelated problem
my level of online shopping has had to drop to 0.  I'm sorry I am unable to be
of more help. 
Thanks for the quick answers.

There doesn't seem to be enough information here to reproduce the bug, so I'm
marking it as worksforme and making it public.
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago19 years ago
Resolution: --- → WORKSFORME
Whiteboard: [sg:needinfo] waiting for info from reporter → [sg:needinfo]
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.