New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 638673 link

Starred by 10 users

Issue metadata

Status: Duplicate
Merged: issue 55719
Owner: ----
Closed: Jun 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 3
Type: Feature



Sign in to add a comment

SEPARATE autofill from credit card prompt!!!!

Reported by murraylp...@gmail.com, Aug 17 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36

Steps to reproduce the problem:
1. Any credit card payment when autofill is on
2. 
3. 

What is the expected behavior?
Enable autofill (handy for addresses) while also turning off credit card prompting

What went wrong?
CONSTANT CREDIT CARD PROMPTING!!!!

Did this work before? N/A 

Chrome version: 52.0.2743.116  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 22.0 r0

You should know better!!!!
 
Components: -UI UI>Browser>Autofill
Labels: -Type-Bug M-52 Type-Feature
Status: Untriaged (was: Unconfirmed)
murraylpratt@ : Thanks for the report, it looks like a feature request.
As of now Chrome will autofill both the Address and Credit card details when these details are stored and the Autofill web forms is enabled.

Untriaged the issue and added respective dev group to update further on this if it can be considered.
You missed the BIG issue - I want to stop the incessant credit card save
prompts - my time is valuable.  You could separately enable turn off of
credit card save prompts.

Comment 3 by zkoch@chromium.org, Aug 18 2016

Cc: jdonnelly@chromium.org
Labels: -Pri-2 -M-52 Pri-3
Thanks for the feedback. This is a good idea, and we'll look into adding suppression/back-off logic for this.
Excellent - thanks for listening!!
To add to this, in a business environment, auto-filling addresses and whatnot is fine. However, prompting users to fill in and save credit card information, especially for customer-facing users is just asking for trouble. Most users will just hit "yes" blindly to store the info, and we really don't want to retain that info--because of security or accidental usage.

Could there be an ADM/ADMX policy to disable just auto-filling for credit card info?
Cc: zkoch@chromium.org
+zkoch for comment #5.
We use Chrome in a business environment and process credit cards via a web-based virtual terminal. We NEVER want our users to be saving customer credit cards they are processing (unnecessarily storing card info is a big PCI compliance no-no,) and the only way to turn off the prompts was to disable auto-fill completely.
I enter client transactions through a browser-based order-management system. Saving CC information is against our privacy policy, and violations of this policy can lead to huge fines to the company and immediate termination to the employee who commits said violation. It's way too easy to accidentally click the "save" button instead of the "no thanks" button.

I also enter other repetitive information in other forms, so standard auto-fill is very useful.

The fact that auto-fill and credit-card auto-fill cannot be turned off separately is a huge security risk to my company and to myself personally. This issue needs to be fixed ASAP.

Comment 9 by rush...@gmail.com, Dec 6 2016

Why hasn't this issue been addressed by Chrome admins? It's clearly an issue, and GOOGLE searches will back that statement. I, too, work for a non-profit where processing credit cards is a huge part of the job. Saving credit card information could be detrimental to my job and donors alike. Please address this issue instead of ignoring your users.
There is a new attack vector out there. A good reason not to store credit card numbers in your browser:

Browser Autofill Profiles Can Be Abused for Phishing Attacks

https://www.bleepingcomputer.com/news/security/browser-autofill-profiles-can-be-abused-for-phishing-attacks/
Is this a duplicate of Issue 55719?
Mergedinto: 55719
Status: Duplicate (was: Untriaged)
Yes, I believe you're correct.

Sign in to add a comment