When using Firefox and logged out if you go to the 'register' or 'request new password' tabs and then try different letters, firefox tries to fill it in for you but it appears as if it is able to see other users inputs here as well. Another user (on a different computer) has registered and when I stick the first letter of their email address in the box, Firefox autofills the rest. It also happens with usernames in the username box. Drupal/Firefox? therefore appears to be disclosing other users email addresses.

Comments

elv’s picture

elv commented
Status: Active » Closed (fixed)

It seems to me it's the normal behaviour of most browsers, it's a problem only if several people share the same computer and browser.
I checked recent builds and the user and email fields are not jQueried in order to autocomplete, so the fields won't show other user names or email addresses.
So the issue can be set to "closed" I think.

elv’s picture

elv commented
Status: Closed (fixed) » Fixed

If there ever was a bug here, it seems to be fixed now. I also tested with FF in D4.7, D5 and D6 beta and couldn't reproduce it.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.

Project: » Lost & found issues

This issue’s project has disappeared. Most likely, it was a sandbox project, which can be deleted by its maintainer. See the Lost & found issues project page for more details. (The missing project ID was 3213)