Entering incorrect sign-in credentials triggers the save password prompt on hbonow.com and linkedin.com |
||||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Steps to reproduce the problem: 1. Go to hbonow.com or linkedin.com 2. Enter a valid username in the sign-in page, and an incorrect password 3. An error page appears, and Chrome prompts the user to save the password What is the expected behavior? Chrome shouldn't prompt users to save an invalid password. What went wrong? The error page was incorrectly detected as a successful sign-in page. Did this work before? N/A Chrome version: 58.0.3029.110 Channel: n/a OS Version: OS X 10.12.4 Flash Version:
,
Jun 19 2017
,
Jun 19 2017
,
Jul 12 2017
,
Jan 29 2018
This is reproducible on linkedin.com with neither a valid username or password. The problem is that PasswordAutofillAgent::DidFinishLoad happens twice after navigation. The first time, PasswordAutofillAgent does not see any forms on the page, therefore password manager's conclusion is that the password form disappeared and therefore login was successful. The second DidFinishLoad sees the form but password manager has already decided to show the prompt. |
||||
►
Sign in to add a comment |
||||
Comment 1 by ranjitkan@chromium.org
, Jun 19 2017