395693 - Ability to disable form manager (saving form information) for specific sites

Status: VERIFIED DUPLICATE of bug 385741

(Toolkit :: Form Manager, enhancement)

Description

[James Stotz]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6

For some secure webpages, the saved form data saves the data when (for security reasons) it should not.  It would be helpful to have an exception list so that for these, or some other pages, you could choose to not have your form data saved.  Currently, there is only a blanket keep/don't keep form data, but generally it is very useful.  The few instances where security is desired, an exceptions list would be extremely useful.

A second example is for privacy of an unsecured site:

http://www.aeroplan.com/landing/process.do?lang=E

Many, I would like to have this card information kept private.

Reproducible: Always

Steps to Reproduce:
1.  Log into secure site.
2.  The next login, secure information is left unsecured
3.
Actual Results:  
The form data is saved

Expected Results:  
Add this site to an exception list so that the card information is not saved.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

There's nothing in this bug report that needs to be kept private, so removing it from the security group.

There are server-side ways of ensuring that form data isn't remembered (autocomplete="off" on the form or form element), but you're right that there's no way to have the user tell Firefox whether or not to remember form data for a given field, short of modifying the page's DOM manually to include the attribute.