Opened 10 years ago
Closed 9 years ago
#1846 closed defect (fixed)
Prevent browser from asking about saving password when login extension doesn't want to
| Reported by: | Nicklas Nordborg | Owned by: | Nicklas Nordborg |
|---|---|---|---|
| Priority: | trivial | Milestone: | BASE 3.4 |
| Component: | web | Version: | |
| Keywords: | Cc: |
Description
This is mainly an issue with the YubiKey extension (http://baseplugins.thep.lu.se/wiki/net.sf.basedb.yubikey) which generate one-time-password used in the login field.
This used to work since we set auto-complete="off" on the input field in those cases. But since Firefox version 30, this attribute is ignored by Firefox (https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion)
The result is that if YubiKey is used Firefox will ask about "Would you like to remember password for ccccccdbrddnjl...." every time a user logs in since the username is never the same. This is annoying and it would be nice if we could get rid of the question.
One workaround is to answer "Never for this site" and Firefox will stop asking.
Change History (2)
comment:1 by , 9 years ago
| Milestone: | BASE Future Release → BASE 3.4 |
|---|---|
| Owner: | changed from to |
| Status: | new → assigned |
comment:2 by , 9 years ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
(In [6591]) Fixes #1846: Prevent browser from asking about saving password when login extension doesn't want to
Fixed by making a clone of the main form with only hidden elements which is then submitted instead of the original form. This avoids triggering the dialog in the browser since it has no password-type field.