432806 - Saved username & password should not auto-populate to fields with different names

Status: RESOLVED WONTFIX

(Toolkit :: Password Manager, defect)

Description

[Ben Davis]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9pre) Gecko/2008050604 Minefield/3.0pre
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9pre) Gecko/2008050604 Minefield/3.0pre

See example URL.  Many web applications have an "admin" section that requires a login.  Many of these applications allow management of users.  In the above example, The login field names are: "login_username" and "login_password".  When I fill in a username the l When the browser asks me if I want it to remember the password, I click "Remember".   Then, when I go to add a new user, my saved login and password are auto-populated in the username and password fields, even though the field names are different ("username" and "password").  

Reproducible: Always

Steps to Reproduce:
1. Visit example url: http://216.205.154.88/~bend/pass_test/
2. User any username/password to login (not real authentication)
3. Click "Login" button
4. When firefox asks you to remember the password, click "Remember"
5. Click on "Add a user" link
Actual Results:  
When you get to the add user page, FF auto-populates the username and password field

Expected Results:  
Because the field names are different, (and therefore they are not login fields),  those fields should not be auto-populated.

Comment 1

[Ria Klaassen (not reading all bugmail)]

I can reproduce this on Windows XP. Range:
http://bonsai.mozilla.org/cvsquery.cgi?module=PhoenixTinderbox&date=explicit&mindate=2007-06-24+19%3A00&maxdate=2007-06-25+21%3A00

Comment 2

[Justin Dolske [:Dolske]]

This was a deliberate design decision for the new password manager (bug 374723). Using field names to distinguish which inputs to fill is wishy-washy, and caused problems with sites that were using different field names on different pages.

The workaround for this would be bug 362576.

Comment 3

[Ben Davis]

Ok.  Out of curiosity, how does firefox actually determine when to fill in a saved username / password field?  

Comment 4

[Justin Dolske [:Dolske]]

It figures out how to fill them in the same way it figures out how to save them.