From 7600d06651634ee7e5411b8813a488e35cd849a9 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Wed, 10 May 2017 01:26:22 +1200 Subject: [PATCH] 0908: reinforcing that 0802=required making it crystal clear that "When attempting to fix an entered URL" means pref 0802 --- user.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/user.js b/user.js index ab825ae..2a534e9 100644 --- a/user.js +++ b/user.js @@ -465,9 +465,9 @@ user_pref("signon.storeWhenAutocompleteOff", true); /* 0907: force warnings for logins on non-secure (non HTTPS) pages * [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1217156 ***/ user_pref("security.insecure_password.ui.enabled", true); -/* 0908: When attempting to fix an entered URL, do not fix an entered password along with it - * i.e do not turn ~http://user:password@foo into ~http://user:password@(prefix)foo(suffix) - * but instead ~http://user@(prefix)foo(suffix) ***/ +/* 0908: When attempting to fix an entered URL (see 0802: browser.fixup.alternate.enabled), + * do not fix an entered password along with it: i.e do not turn ~http://user:password@foo into + * ~http://user:password@(prefix)foo(suffix) but instead ~http://user@(prefix)foo(suffix) ***/ user_pref("browser.fixup.hide_user_pass", true); /* 0909: disable formless login capture for Password Manager (FF51+) ***/ user_pref("signon.formlessCapture.enabled", false);