Skip to content

Password managers autofilling MQTT page and overriding config #277

@Chaoscontrol

Description

@Chaoscontrol

Describe the bug

Bitwarden is auto-filling random users and passwords in the new windfront MQTT page, and since it autosaves, this messed up my config after a restart. Specifically it filled the "key" with the user, and "password". It took me a while to figure wtf was happening.

I think this is an issue for z2m, as it's basically impossible to discourage Bitwarden to do so. I'd have to manually edit all my localhost/homeassistant passwords, and tell all their possible URIs to not autofill in z2m specific paths, which is insane.

I think something should be done so the page wouldn't be identified as a "login" page, and not get autofilled. That, or make it not auto-save at least.

Tested on Zen (Firefox), but I guess it happens on any browser.

To Reproduce

  • Install any password manager (for me it happens with Bitwarden) and activate auto-fill on page load.
  • Visit the MQTT page.
  • A random user and password will be filled (and autosave) in the key and password fields.
  • Upon Z2M restart, it will crash as it won't be able to connect to MQTT.

Expected behavior

Logins shouldn't be autofilled in this page, as it's not a login page.

Affected browsers

Firefox

Stacktrace

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions