[JIRA] [credentials] (JENKINS-22338) Safari silently overwrites various username or password fields

Tue, 07 Oct 2014 03:30:09 -0700

I don't understand how Safari decides which fields to overwrite.

For example on the page Manage Jenkins -> Configure Global Security I use the Project-based Matrix Authorization Strategy and it detects the "User/group to add" text field at the end as the one to put my login name. The html looks like this:

<td colspan="3">
  User/group to add:
  <input id="id1826282text" type="text">
  <span class="yui-button yui-push-button " id="id1826282button" name="">
    <span class="first-child">
      <button type="button" tabindex="0" id="id1826282button-button">Add</button>
    </span>
  </span>
</td>

So it seems the only indication is, that there is a text containing the string "user" in front of an otherwise completely unusual textfield.



BTW, Safari only does that if it also detects a password field on the same page, which in my case is way above on that page in the "Security Realm -> Crowd" setting. The html here looks like this:




<tr nameref="radio-block-0" style="">
  <td class="setting-leftspace">&nbsp;</td>
  <td class="setting-name">Application Password</td>
  <td class="setting-main">
    <input name="crowd.applicationPassword" value="secret" class="setting-input " type="password">
  </td>
  <td class="setting-help"><a class="help-button" href="" class="code-quote">"#" helpurl="/jenkins/plugin/crowd/help-global-apppassword.html" tabindex="9999"><img height="16" alt="Help for feature: Application Password" width="16" src="" class="code-quote">"/jenkins/static/83dac1d3/images/16x16/help.png"></a></td>
</tr>





Here, at least, the field is of type password, it contains "password" in its name, and it has "password" in the string before it...



I'm confused...



Anyway, the problem is, that the "Configure Global Security" page is completely unusable in Safari, as it will overwrite the Crowd password every time. And, the layout being as broken as it is, you don't even notice, as the password field is somewhere outside the page on the far right...
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to