441072 - all username and password typos remembered

Status: RESOLVED WORKSFORME

(Toolkit :: Password Manager, defect)

Description

[Stuart Strickland]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14

Any incorrectly typed username is remembered. If that mistyping contains the password, then the password-as-part-of-the-mistyped-username shows up in the displayed list of available username entries. There is no obvious way to clear this entry.

Reproducible: Always

Steps to Reproduce:
1. Go to http://www.gmail.com
2. Instead of typing username <tab> password, type usernamepassword <tab> password <enter> and get "Username and password do not match" error message. 
3. Correctly log in, log out, close browser, reopen browser, go to gmail.com
4. Type first few letters of username. Incorrectly-typed username-password combination appears as a pre-defined choice of available usernames.

Comment 1

[Stuart Strickland]

Ideally, bad ID/PW combinations should not be remembered. Lacking that, it should be possible to delete incorrect or unwanted entries, somehow.

Comment 2

[Mats Palmgren (inactive)]

> Ideally, bad ID/PW combinations should not be remembered.

I think it works better in Firefox 3 where you can see the result
of the login before clicking "Remember password".

> Lacking that, it should be possible to delete incorrect or unwanted entries

Tools->Options... Security tab, Show Passwords...
Is that what you're looking for?

Comment 3

[Justin Dolske [:Dolske]]

There's no way for the browser to know if a form-based login was successful or not.

Firefox 3 uses a notification bar for remembering the login, so you can wait to see if the login worked before saving it.

You can delete existing login via the prefs UI (see comment 2), or by pressing delete from the username field autocomplete dropdown.

--> WORKSFORME, although INVALID or FIXED could apply just as well.