575466 - Misleading context for text on "Save password" dialog/dropdown

Status: RESOLVED WONTFIX

(Firefox :: Security, defect)

Description

[Julz]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

When Firefox recognises that you've entered a possible "username" / "password" combination on a site it brings up the "Save Password" dialog/dropdown.  Using the site "https://bugzilla.mozilla.org" as a n example and going to the login page you enter the "username" and "password".  The "Save Password" dialog/dropdown comes up with the text "Do you want Firefox to remember the password for "username" on mozilla.org?".  As you can see the last part of this line reads as "mozilla.org".  Now when you click the "Remember" button to store the "username" / "password" combination into the Password Manager it actually stores this using the URL "https://bugzilla.mozilla.org" which is correct.  So the text displayed in the dialog/dropdown is misleading and should really be "Do you want Firefox to remember the password for "username" on "https://bugzilla.mozilla.org"?" to correctly represent the context for the information about to be stored.

Reproducible: Always

Steps to Reproduce:
1. Go to "https://bugzilla.mozilla.org/" and click the "Log In" link at the top of the page.
2. Enter a "username" and "password" and click the "Log in" button.

Actual Results:  
The "Save Password" dialog/dropdown appears with the text "Do you want Firefox to remember the password for "username" on mozilla.org?".

Expected Results:  
Expecting the dialog/dropdown to show the text "Do you want Firefox to remember the password for "username" on "https://bugzilla.mozilla.org"?".

I've put the severity down as "Trivial" because Firefox still correctly stores the URL "https://bugzilla.mozilla.org" for the "username" / "password" combination in the Password Manager.  But this bug is misleading and could possibly lead user confusion.

Comment 1

[Justin Dolske [:Dolske]]

The missing detail isn't relevant for most users, and this shortens the prompt (especially for cases where the hostname is obnoxiously long).