-
-
Notifications
You must be signed in to change notification settings - Fork 9
Description
Describe the bug
Bitwarden is auto-filling random users and passwords in the new windfront MQTT page, and since it autosaves, this messed up my config after a restart. Specifically it filled the "key" with the user, and "password". It took me a while to figure wtf was happening.
I think this is an issue for z2m, as it's basically impossible to discourage Bitwarden to do so. I'd have to manually edit all my localhost/homeassistant passwords, and tell all their possible URIs to not autofill in z2m specific paths, which is insane.
I think something should be done so the page wouldn't be identified as a "login" page, and not get autofilled. That, or make it not auto-save at least.
Tested on Zen (Firefox), but I guess it happens on any browser.
To Reproduce
- Install any password manager (for me it happens with Bitwarden) and activate auto-fill on page load.
- Visit the MQTT page.
- A random user and password will be filled (and autosave) in the key and password fields.
- Upon Z2M restart, it will crash as it won't be able to connect to MQTT.
Expected behavior
Logins shouldn't be autofilled in this page, as it's not a login page.
Affected browsers
Firefox