Actions
Bug #15246
closed
Autofill services like password managers able to override blocked username field for admin user
Status:
Not a Bug
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Release Notes:
Default
Affected Plus Version:
23.09.1
Affected Architecture:
Description
Browsers with extensions like LastPass, BitWarden, etc. that automatically fill relevant fields are able to replace the username field for the admin user, regardless of the fact that the field is greyed out. Adding protections for bad-acting and/or poorly written extensions to browsers that ignore this field state should be added to avoid accidental username re-writes.
Updated by Jim Pingle 11 months ago
- Status changed from New to Not a Bug
We already include the tags to suppress them. Password manglers ignore them.
Actions