Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije
Wócynjony

Specific Website Autofill Bug

Firefox za Android Awtomatiske zapisanje gronidłow
Denys wótegronjony
glennmcauley
glennmcauley

Hi, When I go to a specific website, my password is being auto filled to the page's search bar. I have created an Autofill exception for this site, and it still happens. To stop it, I have to disable password Autofill on entirely. I probably don't need to say this is a security issue. Every time I visit this site my password is being sent to their servers as a search query. I'm using Firefox Android. Please help

Hi, When I go to a specific website, my password is being auto filled to the page's search bar. I have created an Autofill exception for this site, and it still happens. To stop it, I have to disable password Autofill on entirely. I probably don't need to say this is a security issue. Every time I visit this site my password is being sent to their servers as a search query. I'm using Firefox Android. Please help

Wšykne wótegrona (4)

Denys
Denys
  • Moderator
  • Top 10 Contributor

Hi,

Could you please share the website URL? If we can reproduce, we'll either contact the website developers or fix the issue on Firefox end.

Denys
Denys
  • Moderator
  • Top 10 Contributor

If you are concerned about security aspects, you can send me a private message instead of posting publicly.

glennmcauley
glennmcauley Pšašaŕ

Thanks, il dm you

Denys
Denys
  • Moderator
  • Top 10 Contributor

Thank you for the PM. I can reproduce the issue. The password is not only sent as a query, it's displayed on the screen, which makes things even worse.

I've filed a bug for that. I've also marked it as a security vulnerability just in case; maybe we're overthinking, but let's see what the team says. I'll post status updates here.

And thank you once more for reporting that!

Stajśo pšašanje

Musyśo se pla swójogo konta pśizjawiś, aby na pśinoski wótegronił. Pšosym stajśo pšašanje, jolic hyšći njamaśo wužywaŕske konto.