New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 690193 link

Starred by 0 users

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Feb 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 2
Type: Bug


Participants' hotlists:
Security-UX-Consistency


Sign in to add a comment

http dynamic login form shows info icon even before the form is displayed in screen

Project Member Reported by srikanthg@chromium.org, Feb 8 2017

Issue description

App Version: 57.0.2987.39 beta
iOS Version: 10.3, 9.3.5
Device: iPhone7, iPhone6 plus, iPad4
URL: http://http-dynamic-login-badssl.com

Precondition: Goto Chrome Beta experimental settings and add Flag line#1 "--mark-non-secure-as=show-non-secure-passwords-cc-ui". 

Steps to reproduce:
  1. Force quit and Launch Google Chrome Beta
  2. Navigate to http://http-dynamic-login-badssl.com

Observed results: info icon is displayed in omnibox

Expected results: info icon shouldn't be displayed. Info icon should be displayed after clicking on "Show login form" link and the form is displayed on screen,

Number of times you were able to reproduce: 5/5
Bug reproducible after clean install: Yes
Bug reproducible after clearing cache and cookies: Yes
Bug reproducible on Chrome Mobile on Android: NO M58 Chrome Dev
Bug reproducible on Safari/Firefox: Firefox: NA, Safari: NA
Bug reproducible on current stable build (App Version, iOS Version): M56 NO (New Feature)
Bug reproducible on the current beta channel build (App Version, iOS Version): M57 Yes
Autofill bugs: Bug reproducible on Chrome desktop? NO, Chrome on Mac

Link to video/image: https://drive.google.com/file/d/0B-xmXLQhjeKuM1RJU2tUd28tTDA/view 
 
Labels: -Restrict-View-Google
Status: WontFix (was: Assigned)
This is a platform limitation. :-(

I could update http-dynamic-login-badssl.com to avoid putting the form in the DOM before you press the link to show it, but we don't have enough information on iOS to re-hide the indicator if the form goes away, and the engineering would probably not be worth it.
Labels: Hotlist-Security-UX-Consistency

Sign in to add a comment