Multiple Username/password options for autofill show passwords instead of usernames



Passwords & Permissions
17 years ago
14 years ago


(Reporter: Michael Wiktowy, Assigned: Stephen P. Morse)


Windows 95

Firefox Tracking Flags

(Not tracked)




17 years ago
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Win95; en-US; rv:0.9.3+) Gecko/20010828
BuildID:    2001082803

When multiple login/passwords have been entered for the same site, mozilla gives
you the option of choosing which one to use when the site is visited again. The
problem is that the selection list shows the "hidden" passwords in plaintext
rather than the usernames.

Reproducible: Didn't try
Steps to Reproduce:
1. Enter information into the login/password fields of a particular URL
2. Visit same URL again and manually reenter same or different login/password combo
3. Visit URL a third time

Actual Results:  Password list will pop up in plaintext

Expected Results:  Show a selection of usernames rather than passwords. Also, if
both login/password combos are the same then I shouldn't be presented with a
selection. If differentiation within the list is necessary then ****'s should be
shown to indicate password length.

Comment 1

17 years ago
I can't reproduce this.  If I could, I would classify this as a serious privacy 
breach.  The actual url that I used was  What url are you using?


Comment 2

17 years ago
The particular URL that I was using was:

I retried after deleting all the entries for that site in my password manager
and still got the same result.

I retryed with your URL of:

and got the correct result.
One thing I noticed different was a reload does not cause your page to prompt
again but it does for the page. Also, sometimes the page does not
fill in the username or it will fill in the previous one.

Comment 3

17 years ago
Things have somewhat straightned themselves out now. I was sent a password via
email and the password was right at the end of the message. When I copy and
pasted it the copy caught some other invisible characters i.e. they seem to be
carriage returns although I was very careful to just highlight the password.

between the lines of underscores is what gets pasted after the copy of just the
first six chars. That may have messed up the password database parsing. I try
copy and pasting the last section of an email as the password for your site and
it still works as it should. I tried another possibility and it seems to mess it
up. What I did was use an exclamation mark in my first attempt at a password and
then followed it up with the copy and paste password (although the copy and
paste thing may be irrelavent). I will try some more things out when I get home
from work ;]
Mike, so is this bug WFM, then?

Comment 5

17 years ago
If you have checked the and it works for you then sure.
I tried doing the same steps at home where I have a linux box and I don't even
get a selection box for whereas I do get one for the
If you look at the source html of the two pages, the forms are somewhat different.
Regardless, it is pretty obsure.

Comment 6

17 years ago
Marking as WFM per reporter's latest comments.
Last Resolved: 17 years ago
Resolution: --- → WORKSFORME
Product: Browser → Seamonkey
You need to log in before you can comment on or make changes to this bug.