https://bugzilla.mozilla.org/show_bug.cgi?id=1621599

Bugzilla

Quick Search

[                    ]
  * Browse
  * Advanced Search

  * Reports
  * 
  * Documentation

  * New Account
  * Log In
    Login with GitHub
    [                    ] [                    ]
    [password            ] [*] Remember [Log in]  
  * Forgot Password
    [                    ] [Reset Password]  

[moz]

  * Mozilla Home
  * 
  * Privacy
  * Cookies
  * Legal

Please enable JavaScript in your browser to use all the features on
this site.

Copy Summary
V

  * Markdown
  * Markdown (bug number)
  * Plain Text
  * HTML

[                    ]
View V

  * Reset Sections
  * Expand All Sections
  * Collapse All Sections
  * 
  * History
  * 
  * JSON
  * XML

Closed Bug 1621599 Opened 3 years ago Closed 3 years ago

Password generator doesn't generate new password in the same session

Summary:
Password generator doesn't generate new password in the same session

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit V
Toolkit
The Mozilla Toolkit is a set of APIs, built on top of Gecko, which
provide advanced services to XUL applications. These services include
Profile Management, Chrome Registration, Browsing History, Extension
and Theme Management, Application Update Service, and Safe Mode. (
More info)
See Open Bugs in This Product
File New Bug in This Product
Watch This Product
Component:
Password Manager V
Toolkit :: Password Manager
Remembers usernames and passwords on sites and fills them when the
user returns to the site. Debug Logging can help diagnose problems.
See Open Bugs in This Component
Recently Fixed Bugs in This Component
File New Bug in This Component
Watch This Component
Version:
74 Branch
Platform:
Unspecified
Unspecified
Type:
defect
Priority:
Not set
Severity:
normal
Points:
---

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1569568
Status:
RESOLVED
DUPLICATE
of [156956]
Mark as Duplicate
Mark as Assigned
Milestone:
---
Iteration:
---
Project Flags:

Performance Impact [---]
Webcompat Priority [---]
a11y-review        [---]

Tracking Flags:

                   Tracking Status
relnote-firefox             [---]
thunderbird_esr91  [---]    [---]
thunderbird_esr102 [---]    [---]
firefox-esr102     [---]    [---]
firefox108         [---]    [---]
firefox109         [---]    [---]
firefox110         [---]    [---]

People

(Reporter: privat, Unassigned)

Assignee:
Unassigned
Assignee:
[ ] Reset Assignee to default
Mentors:
---
QA Contact:
[ ] Reset QA Contact to default
Reporter:
# privat
Triage Owner:
# serg
CC:
Nobody

References

Depends on:
---
Blocks:
---
Regressions:
---
Regressed by:
---
URL:
 
See Also:
---

Details

Alias:
---
Keywords:
---
Whiteboard:
---
QA Whiteboard:
---
Has STR:
---
Change Request:
---
Votes:
0
Bug Flags:

 behind-pref     [ ]
 firefox-backlog []
 sec-bounty      [ ]
 sec-bounty-hof  []
 in-qa-testsuite [ ]  [                    ]
 in-testsuite    [ ]
 qe-verify       []

Crash Data

Signature:

Security

(public)

This bug is publicly visible.

User Story

Bottom |
Tags V

  * Reset

Timeline V

  * Reset
  * 
  * Collapse All
  * Expand All
  * Comments Only

      Philipp Borchert
      Reporter
[3bf] Description      

      *
      3 years ago

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/
20100101 Firefox/73.0

Steps to reproduce:

  * enable secure password generator
  * go to some webpage that allows you to create accounts with
    passwords (or maybe just password change page)
  * right click on the password input, generate password
  * submit the form
  * visit the page again
  * right click on the password input, generate password

Actual results:

The same password is "generated" twice (as long as you're on the same
domain / page).

Expected results:

Every click on "use generated password" should result in a new
password.
Not sure if this is a bug or "by design". I noticed it while creating
multiple technical user accounts in a backoffice application (one
account after another, with page reloads) so I'd consider this a
security flaw.

      Release mgmt bot [:suhaib / :marco/ :calixte]
      Comment 1
[9eb]                                               
      *
      3 years ago

Bugbug thinks this bug should belong to this component, but please
revert this change in case of error.

Component: Untriaged - Password Manager
Product: Firefox - Toolkit

      Matthew N. [:MattN]
      Comment 2

[8c3] *                   
      3 years ago
      *
      Edited

This is currently by design. You can use separate containers or
restart Firefox to workaround this.

EDIT 2022-12-20: There are at least 3 cases where this is desirable
within a short period of time:

 1. Filling password confirmation fields on the same page if we were
    not able to automatically do so.
 2. Filling the same password on the next page
 3. The password didn't save on the change form so you need to fill
    it on the log in page.
    Bug 1551723 will give the user the option to choose a new
    password.

Status: UNCONFIRMED - RESOLVED
Closed: 3 years ago
Resolution: --- - DUPLICATE
You need to log in before you can comment on or make changes to this
bug.
Top |