clients icon indicating copy to clipboard operation
clients copied to clipboard

Inline auto-fill matches wrong username / password / site

Open bverkron opened this issue 1 year ago • 1 comments

Steps To Reproduce

I do not know how to reliably reproduce this as it only happens sometimes. When it does happen the inline auto-fill choices will be for the last tab that was viewed, not the current tab I'm trying to auto-fill in. So far I think it has only happened when trying to fill the login page for my Unraid web UI.

So, for example, if I have just viewed a tab for Gmail and I switch to the tab for my Unraid login page (in the same window but a different tab) the inline auto-fill options will be for Gmail and NOT Unraid. If I click the auto-fill entry it will fill the credentials into the wrong page (gmail credentials go into the unraid fields I have up on the page)

  1. Go to a tab with some other login, like a gmail login page
  2. Go to Unraid login page in another tab (may work on other pages too)
  3. Click in the username field
  4. Inline auto-fill should show entries for the gmail page
  5. Click on one to fill it
  6. Credentials for gmail will fill into unraid login

However, clicking the browser plugin icon along the top shows the correct match for the current page. So this seems to be specifically an issue with the inline auto-fill mismatching.

Expected Result

Correct matches for the current site / page will be shown in the inline auto-fill list.

Actual Result

Credentials for the last viewed tab will be show in the inline auto-fill list

Screenshots or Videos

1  inline auto-fill list

2  inline auto-fill filled

3  plugin match

4  uri settings

Additional Context

No response

Operating System

macOS

Operating System Version

No response

Web Browser

Safari

Browser Version

17.5 (19618.2.12.11.6)

Build Version

Version: 2024.8.1

Issue Tracking Info

  • [X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

bverkron avatar Oct 18 '24 16:10 bverkron

Thank you for reporting this issue! We've added this to our internal tracking system. ID: PM-13841

bitwarden-bot avatar Oct 18 '24 16:10 bitwarden-bot

Hi there,

I am unable to reproduce this issue, it has been escalated for further investigation. If you have more information that can help us, please add it below.

Thanks!

jtodddd avatar Oct 21 '24 16:10 jtodddd

I am having this issue on multiple different Macs. The same computer running Chrome does not show the problem. Could this be related to pined tabs? The autofil that bw always selects in for gmail, which is my first pinned tab.

MacOS 15.1.1 Safari 18.1.1

What troubleshooting information can I provide that would be useful? It seems to happen for me quite often, to the point where I might be switching away from safari as logging in to anything is becoming a pita :) It's doing it to GitHub this very moment: Screenshot 2024-12-10 at 3 40 33 PM

gfbarros avatar Dec 09 '24 20:12 gfbarros

I also used pinned tabs on my Mac. Though I have not tried to reproduce it without pinned tabs and I cannot consistently reproduce it. It seems to happen at random.

However, I did just run into the same issue on my Windows 11 PC using Brave. I also have a pinned tab in this scenario so maybe pinned tabs is part of the cause regardless of OS / browser, etc.

It autofilled a completely different credential (not even sure which one) and the browser plugin shows only a single match (the right one). So same as my original post but this time I was not using the in-line fill (I think it's disabled on this system, I don't use it often).

2024-12-28 14_40_26-NVIDIA GeForce Overlay DT

2024-12-28 14_40_54-NVIDIA GeForce Overlay DT

bverkron avatar Dec 28 '24 22:12 bverkron

As a side note the only pinned tab in my last Windows / Brave example was for a site I don't have any credentials saved for. So it's not related to the specific site that the pinned tab is using, at least not in my case.

bverkron avatar Dec 28 '24 22:12 bverkron

What @gfbarros is experiencing seems slightly different than me. In his case the pop-up window shows the incorrect login for the current page. But in my case the pop-up shows the correct login for the page and it's the auto-fill and/or inline fill that are mismatched.

bverkron avatar Dec 28 '24 22:12 bverkron