MicrosoftEdge / MicrosoftEdge/WebView2Feedback
[Problem/Bug]: password field is sometimes saved when IsPasswordAutosaveEnabled is false
@maurawinstanley is already working on this.
Since Jun 3, 2024.
- Dominant language
- PowerShell
- Stars
- 526
- Forks
- 67
- PR merge metrics
- No merged PRs in 30d
Description
What happened?
A password form field can be saved & autofilled despite IsPasswordAutosaveEnabled being false. This seems to be provoked by having another input field whose name attribute is "name". See minimal repro case below.
Importance
Moderate. My app's user experience is affected, but still usable.
Runtime Channel
Stable release (WebView2 Runtime)
Runtime Version
124.0.2478.97
SDK Version
1.0.2478.35
Framework
Win32
Operating System
Windows 10
OS Version
10.0.19045 Build 19045
Repro steps
Modify the WebView2GettingStarted sample to load this content. Fill out the form and submit. Stop the app and run it again. The autofill prompt will show the password (in clear text) as well as the name. If you change name="name" to name="xyz" then it stops saving the passwords that you enter.
<html>
<body>
<form method="post" action="anything">
<input type="text" name="name"/>
<input type="password" name="passwd"/>
<input type="submit" value="Submit"/>
</form>
</body>
</html>
Repros in Edge Browser
Yes, issue can be reproduced in the corresponding Edge version
Regression
Don't know
Last working version (if regression)
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.