Opened 7 years ago

Closed 7 years ago

#1846 closed defect (fixed)

Prevent browser from asking about saving password when login extension doesn't want to

Reported by: Nicklas Nordborg Owned by: Nicklas Nordborg
Priority: trivial Milestone: BASE 3.4
Component: web Version:
Keywords: Cc:

Description

This is mainly an issue with the YubiKey extension (http://baseplugins.thep.lu.se/wiki/net.sf.basedb.yubikey) which generate one-time-password used in the login field.

This used to work since we set auto-complete="off" on the input field in those cases. But since Firefox version 30, this attribute is ignored by Firefox (https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Turning_off_form_autocompletion)

The result is that if YubiKey is used Firefox will ask about "Would you like to remember password for ccccccdbrddnjl...." every time a user logs in since the username is never the same. This is annoying and it would be nice if we could get rid of the question.

One workaround is to answer "Never for this site" and Firefox will stop asking.

Change History (2)

comment:1 Changed 7 years ago by Nicklas Nordborg

Milestone: BASE Future ReleaseBASE 3.4
Owner: changed from everyone to Nicklas Nordborg
Status: newassigned

comment:2 Changed 7 years ago by Nicklas Nordborg

Resolution: fixed
Status: assignedclosed

(In [6591]) Fixes #1846: Prevent browser from asking about saving password when login extension doesn't want to

Fixed by making a clone of the main form with only hidden elements which is then submitted instead of the original form. This avoids triggering the dialog in the browser since it has no password-type field.

Note: See TracTickets for help on using tickets.