New issue
Advanced search Search tips

Issue 634580 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Aug 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug



Sign in to add a comment

"coda2" -> area code

Project Member Reported by a...@chromium.org, Aug 5 2016

Issue description

Steven Frank of Panic Inc, which makes a website editor named "Coda" tweets:

https://twitter.com/stevenf/status/761273700498886656 :
> TIL if you have an HTML text input named "coda2" that happens to
> represent purchase quantity, Chrome will autofill it with user's area code

https://twitter.com/stevenf/status/761273733646385152 :
> Please don't ask how I learned this.

Can we fix this?
 
it's possible to fix our heuristics but it's likely to regress some other site somewhere. Could Mr Frank be persuaded to add this to his <input>: autocomplete="purchase-quantity"

Comment 2 by stev...@panic.com, Aug 5 2016

Hello, Steven reporting in.  :)

For now I'm using autocomplete="off" on that field which has remedied the immediate problem, and is a workaround I'm satisfied with.  I'm curious what the motivation is for autocomplete="purchase-quantity" as it's hard to imagine a situation in which I would want a purchase quantity autofilled?

I agree that it would be tricky for you to address this without affecting someone else down the road.  Our situation is probably unique, it just happened to be the perfect storm for us -- we had two customers in the span of a month who accidentally charged approximately $20,000 to their credit cards instead of the $99 they were expecting, because the purchase quantity field got populated with their three-digit area code when they autofilled their address.  After the second incident, I was finally able to track this down as the root cause.
> it's hard to imagine a situation in which I would want a purchase quantity autofilled?

This would be useful for a customer that always charges the same amount.

Comment 4 by ma...@chromium.org, Aug 5 2016

Status: WontFix (was: Untriaged)
Thanks Steven, 

autocomplete="purchase-quantity" is a sure way of making sure Chrome will not autofill, because Chrome doesn't fill fields that have unrecognized autocomplete attributes.

I'm going to mark this as WontFix for the reason estade@ mentioned above. 

Thanks for the feedback
right, autocomplete="purchase-quantity" wouldn't be autofilled at all by any sane browser. It just tells us what the field is so we don't confuse it for an area code.

Sign in to add a comment