3 ms·

This seems like an easy fix for the layout engines. Only include a field on autofill if it's currently visible on screen. One might even classify this as a bug

by Aqueous 13y ago

This seems like an easy fix for the layout engines. Only include a field on autofill if it's currently visible on screen. One might even classify this as a bug.

daveasdf 13y ago
"Visible on screen" unfortunately is a hard thing to determine. You can easily imagine a textbox with white text on a white background, or a very small textbox, or a textbox that briefly pops up whenever you type a keystroke or click the mouse, or... Browsers really need to support some mechanism where the user can determine precisely what information will be filled prior to it being handed over to the website. This needn't be difficult; Chrome's existing autofill popup already displays a subset of the information, the popup just needs to give a fuller picture.
- mintplant 13y ago
  ---------------------------------------------------- | This webpage is asking for information that your | | browser can automatically fill in for you. Check | | the box next to each item you'd like to include. | | | | [x] Email address - bob@example.com | | [ ] Name - Bob Jones | | [ ] Address - 123 Sample Street | | | | [Autofill] [No thanks] | ----------------------------------------------------
snewman 13y ago
I suspect this would be very difficult to implement robustly. There are just too many ways to hide something: color it white, overlay another element on top, use a weird font that causes it to look like something else, ...
- RoboKitten 13y ago
  This would not be hard to do. There are standard names for the auto complete form inputs. The browser (or plugin) could be configured to notify you if some/any of those fields are about to be posted and warn the user using a native code generated pop-up (not a web pop-up).

by Aqueous 13y ago

This seems like an easy fix for the layout engines. Only include a field on autofill if it's currently visible on screen. One might even classify this as a bug.

daveasdf 13y ago

"Visible on screen" unfortunately is a hard thing to determine. You can easily imagine a textbox with white text on a white background, or a very small textbox, or a textbox that briefly pops up whenever you type a keystroke or click the mouse, or... Browsers really need to support some mechanism where the user can determine precisely what information will be filled prior to it being handed over to the website. This needn't be difficult; Chrome's existing autofill popup already displays a subset of the information, the popup just needs to give a fuller picture.

mintplant 13y ago
---------------------------------------------------- | This webpage is asking for information that your | | browser can automatically fill in for you. Check | | the box next to each item you'd like to include. | | | | [x] Email address - bob@example.com | | [ ] Name - Bob Jones | | [ ] Address - 123 Sample Street | | | | [Autofill] [No thanks] | ----------------------------------------------------

snewman 13y ago

I suspect this would be very difficult to implement robustly. There are just too many ways to hide something: color it white, overlay another element on top, use a weird font that causes it to look like something else, ...

RoboKitten 13y ago
This would not be hard to do. There are standard names for the auto complete form inputs. The browser (or plugin) could be configured to notify you if some/any of those fields are about to be posted and warn the user using a native code generated pop-up (not a web pop-up).