MySQL Bugs: #47497: Cannot set password to <blank> in Dashboard if previously tell FF to Remember PW

Bug #47497	Cannot set password to <blank> in Dashboard if previously tell FF to Remember PW
Submitted:	21 Sep 2009 22:06	Modified:	19 Feb 2010 22:17
Reporter:	Chris Calender	Email Updates:
Status:	Can't repeat	Impact on me:	None
Category:	MySQL Enterprise Monitor: Configuration	Severity:	S3 (Non-critical)
Version:	2.0, 2.1	OS:	Linux
Assigned to:	Josh Sled	CPU Architecture:	Any
Tags:	blank password, dashboard, email notification, Firefox

Description:
If you previously set up email notifications, and tell Firefox to "Remeber Password", then you cannot ever change the password to <blank> afterwards.

This is necessary if the user does not want to use authentication with their SMTP server.

How to repeat:
1. Use Firefox to set up email notifications (entering a non-blank "SMTP Server Login" and "SMTP Server Password").

2. When Firefox asks you to "Remeber Password", tell it to do so.

3. Try to change the "SMTP Server Password" to <blank> and click "Save".

4. You'll see the previous password keeps populating the "SMTP Server Password" field.

Suggested fix:
1. Put these two lines anywhere in the form html before the actual 
userid/password fields and they will consume the password manager fill-ins.

<input type=”text” style=”display: none” />
<input type=”password” style=”display: none” />

2. If we cannot add the above, then this should at least be documented somewhere (i.e., README and docs).

Work-around:

Remove the URL (for the specific user) from the "Saved Passwords" list:

Edit -> Preferences -> Security -> Saved Passwords -> Select Dashboard URL (for the previously saved user) -> Remove

Then retry to set the password to <blank>.

Note that this does not affect Windows, but is easily reproducible on Linux (SuSE, Debian, and Ubuntu).

Josh Sled writes: 
https://developer.mozilla.org/en/How_to_Turn_Off_Form_Autocompletion

Josh Sled writes: 
I can't reproduce with mem 2.2 and firefox 3.5.7 (linux).  The password fields are not filled in with anything in subsequent requests.