My browser tries to autofill my password in Replit's secrets UI

Support Bug Reports
1

Problem description:
Replit makes my browser think that it’s a good idea to autofill my Replit password in the secrets UI.

Expected behavior:
My browser doesn’t try to put my password in secrets automatically.

Actual behavior:
Replit makes my browser think that my password belongs in secrets, as shown in this screenshot (I made it narrow for security).
image

Steps to reproduce:

  1. Open any repl’s secrets tab using Chromium.
  2. Watch Chromium incorrectly think that the secrets field is a password input (and potentially leak your password).

Bug appears at this link:
Any Replit editor page

Browser/OS/Device:

Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
2 Likes
2

Hey @9pfs1!

Thank you for reporting this. It appears that this might be related to Code search tab autofills saved usernames as well.

We will look into this and will follow up as soon as we have an update!

6 Likes
5

Created a fix for this. Should land in prod in the next couple of days

6 Likes
6

Did you also fix the code search box too?

7

Not yet, will make a PR when I have time

1 Like
8

It seems like the bug still occurs.

image
image736×708 19.7 KB

1 Like
9

Noted, will TAL in a bit

1 Like
10

Code Search is also still broken.

11

Just fixed this issue

1 Like
12

Code search? Screenshot please.