Bug 176112
Summary: | <input> element autocompletes based on placeholder text | ||
---|---|---|---|
Product: | WebKit | Reporter: | Monica Dinculescu <noms> |
Component: | DOM | Assignee: | Nobody <webkit-unassigned> |
Status: | NEW | ||
Severity: | Normal | CC: | ap, cdumez, chrisgrande, jberlin, rmondello, webkit-bug-importer, wenson_hsieh |
Priority: | P2 | Keywords: | InRadar |
Version: | Safari 10 | ||
Hardware: | Unspecified | ||
OS: | Unspecified |
Monica Dinculescu
An <input autocomplete="off" placeholder="my favourite email"> will show email suggestions. It seems to look at the placeholder for magic words, and shouldn't, according to the spec: https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#autofill.
This happens whether the input is outside a form, inside a form, or inside a <form autocomplete=off>.
JSBin: http://jsbin.com/mubaquluka/edit?html,output
Attachments | ||
---|---|---|
Add attachment proposed patch, testcase, etc. |
Monica Dinculescu
(you need to have stuff in your Contacts book and allow autocompleting in Safari for autocomplete to work, btw)
Monica Dinculescu
Also, the unofficial workaround is to use homoglyphs, which is sad and scary: https://stackoverflow.com/questions/45461278/safari-autofill-populates-any-field-with-a-placeholder-attribute-containing-the
Radar WebKit Bug Importer
<rdar://problem/34168217>
Christopher Grande
This continues to be an issue.
Causing all sorts of oddities; for example:
Safari autocomplete UI appearing over website autocomplete UI.
Incorrect address book autocomplete, for example a field called "Event Name" triggers Safari to start presenting address book names.
Incorrect password autocomplete, for example on password input fields being used to enter/obscure API keys or other sensitive but non password information.
The only "fix" are fragile hacks, as mentioned by Monica.