286319 - password manager overwrites stored password with empty one

Status: RESOLVED DUPLICATE of bug 221634

(Toolkit :: Password Manager, defect)

Description

[jan.sembera]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050228 Firefox/1.0.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050228 Firefox/1.0.1

When I visit site that is not completely loaded (most often due to offsite
banner being loaded), sometime I get my remembered password replaced with empty
one - I just write my username (I have more of them, so I do this even when the
page is fully loaded), press tab and press enter or click mouse. When the page
is not fully loaded, password doesn't appear automatically, and empty one is
send instead (I don't notice missing password in time, it is mostly automated
action from my part, because I do this many times a day). Worse, empty one is
also remembered and the correct one is lost. 

Reproducible: Always

Steps to Reproduce:
1. Go to any website with logon form that contains some objects that cannot be
loaded (timeouts, slow servers, etc.)
2. Enter your valid username for which you also have stored password
3. Try login.

Actual Results:  
Remembered password is lost.

Expected Results:  
Either user should be warned about password being changed or overwritten, or
passwords should be available immediately when rendering takes place (would be
preffered solution) - waiting for all the images etc. to load is just too late.

Comment 1

[rabsanito]

One of my passwords is saved routinely and I can see it in the password manager
window. After logging out from the site the password is not retrieved the next
time I try to log in. The username is offered in a choice of three names from a
pull down menu. Choosing the name does not retrieve the password.

http://kerestourneys.proboards29.com/index.cgi?action=login

If I try with 

http://kerestourneys.proboards29.com/index.cgi?action=login&user=username 

the username and the password are retrieved and everything works. 

Netscape doesn't offer a choice of names, it just sets the right one and the
password. But works in BOTH cases.


Firefox has three names (two old names and the actual) and perhaps would work
like Netscape is there were no choices in the pulldown menu. But I don't know
how to make Firefox "forget" the wrong names, clearing the passwords doesn't do it.

Comment 2

[Gervase Markham [:gerv]]

This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
Firefox:     http://www.mozilla.org/projects/firefox/
Thunderbird: http://www.mozilla.org/products/thunderbird/releases/1.5beta1.html
Seamonkey:   http://www.mozilla.org/projects/seamonkey/

Comment 3

[Thomas K. (:tom)]

*** Bug 285494 has been marked as a duplicate of this bug. ***

Comment 4

[HopeSeekr of xMule]

So besides marking the eldest bug a duplicate of the newer one, is any action at
all being taken or should i have not bothered?  This has been on-going for at
least 8 months now and probably affects a lot of people.  My mom had a horrid
time trying to figure this one out.

Perhaps if some one could tell me the general place where this error would occur
I could hack it myself?

Comment 5

[jan.sembera]

I guess it would be dependent on what the fix actually would be. There are
several options:

1] Do loading of stored passwords as soon as form is successfully rendered and
do not wait for loading whole page. And, of course, fill password anywhere
during further loading, when user fills the desired username. This would be
very, very pleasant feature, but I guess it would be hardest to code. 

2] Do not change stored password unless the page has been completely loaded,
which wouldn't fix problem with fast login itself, but at least it would not
overwrite the password.

3] Do not change password automatically at all. Would be logical behaviour, but
still doesn't fix fast login problem itself. 

4] Opera-like behaviour. Fill contents of form on-demand (key combo) in case
page is not fully loaded. I would not like this one, but it is a possibility.
But probably not simple to code. 

I myself would vote for number 1, but because I don't dare coding something as
big as this, I have no say in this. 

Comment 6

[David P James]

Mass edit: Changing QA to default QA Contact

Comment 7

[Michael Wu [:mwu]]

*** This bug has been marked as a duplicate of 221634 ***