15
2
With HTML 5 there is a new attribute called autocomplete
. If it's set to autocomplete=off
, then the browser does not store the password.
How can I override this setting, short of modifying the source code of Firefox and recompiling it? Is there maybe a Firefox about:config option I am overlooking that I can toggle - an "ignore:autocomplete" or something?
@user743115: Do now work anymore. (You got some vote ups, so i think i may have worked in the early days). Tested with Firefox 32.0.1, Greasemonkey 2.2 and current script on Magento Backend CE 1.9.0.1 – user620965 – 2014-09-18T11:23:59.870
Browser is an user agent. That is, an agent that acts in the service for the user, on user's computer. Not for the website. – Tomáš Kafka – 2019-01-23T16:01:59.523
3Because as part of a security audit we have to add autocomplete=off to all our logins in order to pass the audit. This is a real pain for all of our project development and testing teams. Their is no need to have it off in dev or test, but at the same time it would be ridiculous to have an environment switch on this on all of our products. Many of our QA are rightly complaining about having to login. We have multiple customers with custom features, so logging in and out between customers frequently is needed for testing. With this turned off it has noticeably slowed our testing. – None – 2011-06-27T14:17:07.860
And yes, we have automated testing, but not everything can or should be automated. – None – 2011-06-27T14:17:17.830
2@user: so why not have a flag in your code which you can switch on that triggers whether the site serves the autocomplete flag? development-specific flags for testing are not an unusual thing to have in an app. Or change the passwords in the QA environment. Or write a Greasemonkey script to give you a quick-login button for each user. There's plenty of ways around this that don't involve hacking Firefox. – None – 2011-06-27T14:28:02.020
@spudley - Too many projects with too many autocomplete flags (legacy and new) to add environment flags for our environment for this (i.e. too much work with too little value to get buy in). I thought there might be some plugin or config setting I was unaware of that would just override this flag and make it easy. I will check out Greasemonkey options. – None – 2011-06-27T15:06:44.827
2
ANSWER @Spudley comment: The Greasemonkey script lead me to this:
http://downloadsquad.switched.com/2005/08/29/skip-login-pages-with-greasemonkey-scripts-todays-browser-tip/ with a link to the script "AllowPasswordRemembering" which overrides the autocomplete=off flag. This works. Thanks!
11What a moronic security feature. If saving passwords is too risky, then don't support it at all. If it's not too risky, then always allow it. Why on Earth is this down to web developers? What do THEY have to do with this decision? </rant> – RomanSt – 2011-12-12T14:09:14.230