10 ms·
Firefox and the Mozilla Suite have had a very similar problem since at least 2005: it autofilled usernames and passwords, which creates a problem with XSS or us
by praseodym 13y ago
Firefox and the Mozilla Suite have had a very similar problem since at least 2005: it autofilled usernames and passwords, which creates a problem with XSS or user-generated content on the same domain. The bug was marked WONTFIX: https://bugzilla.mozilla.org/show_bug.cgi?id=280469 https://bugzilla.mozilla.org/show_bug.cgi?id=280469
- bad_user 13y agoStrange, but for me Firefox does not auto-fill passwords, unless you provide a username (and of course, you opted into auto-filling). What did it do, as I don't understand? Did it automatically auto-fill password fields that happened to get loaded on the page?
- praseodym 13y agoIt indeed autofilled password fields on the page. Haven't re-tested it, but I think most browsers still show the same behaviour.