搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Firefox on windows 8.1 is autofilling a password field when autocomplete is off.

  • 5 个回答
  • 24 人有此问题
  • 10 次查看
  • 最后回复者为 cor-el

more options

Hi there.

Firefox (Latest version) for windows is autofilling a password field, even with autocomplete turned off.

The HTML for the fields are as follows:

<input name="member_password1" autocomplete="off" type="password">
<input name="member_password2" autocomplete="off" type="password">
Leave password blank to autogenerate a password

In all other browsers this works fine, and the saved password is not added, but Firefox on Windows 8.1 this is being filled in automatically, with the users saved password.

Hi there. Firefox (Latest version) for windows is autofilling a password field, even with autocomplete turned off. The HTML for the fields are as follows: <input name="member_password1" autocomplete="off" type="password"> <br> <input name="member_password2" autocomplete="off" type="password"> <br> Leave password blank to autogenerate a password In all other browsers this works fine, and the saved password is not added, but Firefox on Windows 8.1 this is being filled in automatically, with the users saved password.

被采纳的解决方案

Thanks - I'll see what I can find. Almost a shame that Mozilla simply ignores these fields though.

Such is life!

定位到答案原位置 👍 0

所有回复 (5)

more options

Yes, this is a change in Firefox 38. If the user has enabled the password manager, then Firefox will ignore autocomplete="off" when it finds a login form.

https://www.mozilla.org/firefox/38.0/releasenotes/

I'm not sure of the exact nature of your concern. For example, a user posted about how this is a problem for users who need to administer user credentials for others, since their own login gets filled (https://support.mozilla.org/questions/1063227). Unfortunately, the only workaround I know of is to delete the login so it can't be filled on any form on the relevant site.

more options

How then, should the fields be set up to force firefox to not autofill those fields?

I've since noticed that it is happening on Mac (I just had two usernames/passwords for the same site saved)

Case scenario: Add new user page with a field for Username and Password box. The Password box is then being auto-populated by the users saved passwords.

According to what you've said, the only way to stop this would be to completely turn off "Remember Passwords for Sites" option, unless there's some other HTML way that we can tell firefox that this field SHOULD NOT be getting auto-filled.

more options

Stewart-Elvanto said

Case scenario:
Add new user page with a field for Username and Password box. The Password box is then being auto-populated by the users saved passwords.

According to what you've said, the only way to stop this would be to completely turn off "Remember Passwords for Sites" option, unless there's some other HTML way that we can tell firefox that this field SHOULD NOT be getting auto-filled.

No, you could keep the feature on but delete the saved password(s) for that site and not save any more for the site going forward.

I don't use this feature myself, but I have read that if you save two logins for the same site, Firefox shouldn't autofill the fields, but instead display available usernames in a drop-down when clicking in the username field. Not sure this will work, but if saving two fictitious logins will block the feature that might be a convenient workaround.

Regarding HTML changes, the new Google login form which asks for the username on a separate screen from the password has been successful in blocking the password manager from automatically logging users in. I haven't studied the mechanics of the form, but scripting definitely is used.

more options

选择的解决方案

Thanks - I'll see what I can find. Almost a shame that Mozilla simply ignores these fields though.

Such is life!

more options

You can toggle signon.autofillForms to false to prevent Firefox from entering the name and password automatically.

You can open the about:config page via the location/address bar. You can accept the warning and click "I'll be careful" to continue.