Hacker News Reader

Comment by AndrewDucker | Hacker News Reader

Doesn't seem to be an issue in Firefox, as far as I can tell. Certainly didn't fill any other fields for me.

Even if it showed you the fields, it wouldn't be conclusive proof of a privacy leak. Firefox shows links visited without exposing that property outside of render context: https://blog.mozilla.org/security/2010/03/31/plugging-the-cs...

The fields in this demo are being echoed back from the server, so if you see values in them then it is indeed proof they are being leaked.

The fields appear immediately, the demo actually does this:

    $("#mine").submit( function() {
    $("#hide").css("height","auto");

I think the concern is that you might submit a form to a server without knowing that you're sending all that data (just some of it).

I have the same results.

Doesn't matter what I picked in autocomplete, nothing else was submitted.

(firefox 24 on linux)

It's an issue for me with the Lastpass addon in Firefox, if I use the Lastpass autofill. That doesn't make it a Firefox issue, of course.

And then only if you opt-in for the site.

Works in Chrome if I use certain autofill sets (ended up testing with email address rather than name and it worked)

Chrome would not autofill my name, just my email and then it filled in everything else. Disabled it.