autocomplete='off' and fields still autopopulate

By design Issue #9847360

Details

Created
Nov 17, 2016
Privacy
This issue is public.
Found in
  • Microsoft Edge
Reports
Reported by 2 people

Sign in to watch or report this issue.

Steps to reproduce

  1. Login to a site and save your username/password.
  2. After login, the user is able to goto a form to add another user to the db. It’s got many fields including a password and email field for the new user.
  3. Anytime this form is accessed by Edge, the password and email fields get autofilled by the creds that I saved when logging into the site.
  4. I’ve tried the following, but nothing stops Edge from autofilling password and email fields.
<form class='form-horizontal' autocomplete='off'>
<input type='password' autocomplete='off'>

Below example seems to work for FF, Chrome and Safari.

<input type='password' autocomplete='new-password'>

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Ibrahim O.”

    • Thank you for your feedback. Could you please provide us a sample or URL that can demonstrate the issue along with your build version (winver.exe)

      Best regards,
      The MS Edge Team

    • Hi Ibrahim,
      Unfortunately I cannot share the application since it is an internal product for the company I work for. I tried creating a fiddler for you but am in need of a back end to log into. You should be able to repro this issue by logging into any site and when the password manager is invoked, save your credentials. Then, any form you try to fill out after your credentials are saved, will be prepopulated with your info if they possess . It’s easiest to recreate when logging into an admin panel, a provisioning application or maybe even a signup form.

    • Here is the versioning info you requested.

      Edition: Windows 10 pro
      Version: 1607
      OS Build: 14393.447

      Microsoft Edge 38.14393.0.0
      Microsoft EdgeHTML 14.14393

    • Thank you for the update. I see the issue now, we will look into that. 

      All the best,
      The MS Edge Team

    • Microsoft Edge Team

      Changed Assigned To to “Dave B.”

      Changed Assigned To from “Dave B.” to “David S.”

      Changed Assigned To from “David S.” to “Yan Z.”

      Changed Assigned To from “Yan Z.” to “Sean L.”

      Changed Status to “By design”

    • In IE11 and Edge, we made the decision to ignore autocomplete=off, reasoning the user agent was allowed to ignore this to provide increased user value. We will go ahead and close this bug as "By design", thanks again for your feedback and w
      e continue to welcome more feedback and look forward to hearing from you again soon.

      Best regards,

      The MS Edge Team

    • “By Design” doesn’t mean that the functionality is correct. I’m struggling with a complex web form that is auto-populating the wrong values into some text fields in Edge browser, and now I have to code some sort of “special” fix for Edge. C’mon guys why not just design it properly and behave like other browsers instead of making us write “special” code for Edge.

    • Well, it actually provides decreased user value when password appears in protected field that has nothing to with password.

    • This is just one more reason to use Chrome. I have a very complex web page with many fields that 99% of the time accept a decimal number. Since it “remembers” what I have typed and I want to type 1 and hit enter it shows the suggestions for anything i have ever entered that has “1” in it (such as 9/1/2016) and then i have to hit enter 2 times (one to ignore/close the suggestions and one more to go to the next field). Works great in Chrome, FireFox, Opera.

    You need to sign in to your Microsoft account to add a comment.

    Sign in