Closed Bug 280881 Opened 20 years ago Closed 20 years ago

Password Manager reveals username and password as a combination

Categories

(Toolkit :: Password Manager, defect)

x86
Windows XP
defect
Not set
major

Tracking

()

RESOLVED INVALID

People

(Reporter: dly, Assigned: bryner)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0 After I enter my master password, Firefox occasionally reveals a caombination of my username and password in the username input box. For example, if my username is "blah" and my password is "1234blah" then when I focus on the site username input box, Firefox password manager automatically fills "blah1234blah". Reproducible: Always Steps to Reproduce: 1.goto webmail.prosrm.com 2.Focus username box 3. It happens on several sites too. But I can't remember which one right now. Actual Results: Combination of username and password appear in the username box in clear text. Expected Results: only fills the username
Is it possible you typed the combined string into the box once (perhaps going quickly and missing the tab between fields)? If so it may be captured by the "Form Fill" feature, not the password manager. You can clear all form fill data from the options dialog, or delete individual items from a dropdown list using shift-delete. The logon form for the mentioned https://webmail.prosrm.com has the autocomplete="off" attribute on the password field, so the password manager shouldn't even come into play on this site (and doesn't for me).
Thanks, I think your comment is correct. I am using a different machine now. I tried to goto webmail.prosrm.com again and purposely enter the combination. I failed to logon of course. The issue occurs as you say. I will try on the machine which I found the problem again and let you know. Doug
Closing for now, reopen if you can reproduce the originally described complaint.
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → INVALID
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.