-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[User] Prevent disabled input change by password manager #204269
Conversation
x-pack/plugins/security/public/authentication/login/components/login_form/login_form.tsx
Outdated
Show resolved
Hide resolved
@elastic/kibana-security could I get another look at this? Thanks! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I was able to confirm the issue, and the fix works. 👍
Had to use LastPass and disable my usual manager to trigger the behavior. Dashlane seemed to be smart enough to not attempt to autofill the disabled field.
Nit: would it be possible to augment the unit tests to validate this change?
Good point @jeramysoucy. Added test in f2ab08d. |
💛 Build succeeded, but was flaky
Failed CI StepsTest Failures
Metrics [docs]Async chunks
History
|
Starting backport for target branches: 8.x |
) Prevents username input from being edited by password manager extensions when `disabled` (cherry picked from commit d96168c)
💚 All backports created successfully
Note: Successful backport PRs will be merged automatically after passing CI. Questions ?Please refer to the Backport tool documentation |
…) (#206152) # Backport This will backport the following commits from `main` to `8.x`: - [[User] Prevent disabled input change by password manager (#204269)](#204269) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Nick Partridge","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-01-09T22:48:03Z","message":"[User] Prevent disabled input change by password manager (#204269)\n\nPrevents username input from being edited by password manager extensions when `disabled`","sha":"d96168c64f88547aa2f8aa1f991fbfda899218a0","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","v9.0.0","backport:prev-minor"],"title":"[User] Prevent disabled input change by password manager","number":204269,"url":"https://github.com/elastic/kibana/pull/204269","mergeCommit":{"message":"[User] Prevent disabled input change by password manager (#204269)\n\nPrevents username input from being edited by password manager extensions when `disabled`","sha":"d96168c64f88547aa2f8aa1f991fbfda899218a0"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/204269","number":204269,"mergeCommit":{"message":"[User] Prevent disabled input change by password manager (#204269)\n\nPrevents username input from being edited by password manager extensions when `disabled`","sha":"d96168c64f88547aa2f8aa1f991fbfda899218a0"}}]}] BACKPORT--> Co-authored-by: Nick Partridge <[email protected]>
Summary
Prevents username input from being edited by password manager extensions when
disabled
.fixes #204268
Checklist