Uploaded image for project: 'WORKTERRA'
  1. WORKTERRA
  2. WT-12126

Production | Firefox | Change password | Admin Login | UserId is populating with Security question answer

    Details

    • Type: Bug
    • Status: Resolution Setting
    • Priority: Medium
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: BenAdmin
    • Labels:
      None
    • Environment:
      Production
    • Bug Type:
      Functional
    • Bug Severity:
      Medium
    • Level:
      Admin
    • Module:
      BenAdmin - Security
    • Reported by:
      Harbinger
    • Company:
      All Clients/Multiple Clients
    • Item State:
      LB QA - Ready for Stage

      Description

      Environment: Production
      Login: Company admin
      Page: Change Password Password
      Browser: Fire fox

      Admin login > Change Password > New Password field is auto filled

      screen capture for the same is attached with jira.

      Hrishikesh Deshpande Rakesh Roy

        Attachments

        1. Screenshot (5).png
          Screenshot (5).png
          81 kB
        2. Screenshot (6).png
          Screenshot (6).png
          80 kB
        3. TestCase_LoginPage.xls
          35 kB
        4. WT-12126 Description.odt
          46 kB

          Issue Links

            Activity

            priya.dhamande Priya Dhamande (Inactive) created issue -
            priya.dhamande Priya Dhamande (Inactive) made changes -
            Field Original Value New Value
            Link This issue relates to WT-12109 [ WT-12109 ]
            priya.dhamande Priya Dhamande (Inactive) made changes -
            Attachment Screenshot (6).png [ 67611 ]
            Hide
            priya.dhamande Priya Dhamande (Inactive) added a comment -

            The issue is applicable for Admin Change password and mployee Change Password Page with Company admin login.

            Hrishikesh Deshpande

            Show
            priya.dhamande Priya Dhamande (Inactive) added a comment - The issue is applicable for Admin Change password and mployee Change Password Page with Company admin login. Hrishikesh Deshpande
            rakeshr Rakesh Roy (Inactive) made changes -
            Summary roduction | Firefox | Change password | Admin Login | UserId is populating with Security question answer Production | Firefox | Change password | Admin Login | UserId is populating with Security question answer
            niteen.surwase Niteen Surwase (Inactive) logged work - 15/Nov/17 05:00 PM
            • Time Spent:
              2h
               

              Analysis and trial error for this issue.
              Checked Auto-complete on all the browsers
              Unit Test

            niteen.surwase Niteen Surwase (Inactive) made changes -
            Status Open [ 1 ] In Development [ 10007 ]
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Item State Parent values: Development(10200)Level 1 values: In Analysis(10204)
            Hide
            niteen.surwase Niteen Surwase (Inactive) added a comment -

            Hi Swapnil Pandhare,

            Analysis done. Follwing are the solution tried on local;
            1: Added 'readonly' on document.ready -NOT WORKED
            2: Disabled fields until we load whole page -NOT WORKED

            Not able fix this issue as Chrome Browser auto-fills saved password on double click on that password field.

            Thanks,
            Niteen S.

            Cc: Satya Samir

            Show
            niteen.surwase Niteen Surwase (Inactive) added a comment - Hi Swapnil Pandhare , Analysis done. Follwing are the solution tried on local; 1: Added 'readonly' on document.ready -NOT WORKED 2: Disabled fields until we load whole page -NOT WORKED Not able fix this issue as Chrome Browser auto-fills saved password on double click on that password field. Thanks, Niteen S. Cc: Satya Samir
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Assignee Niteen Surwase [ niteen.surwase ] Swapnil Pandhare [ swapnil.pandhare ]
            swapnil.pandhare Swapnil Pandhare (Inactive) logged work - 16/Nov/17 04:24 AM
            • Time Spent:
              2h
               

              Analysis & Discussion with Priya, Niteen, Samir

            sudhir.kalikate Sudhir Kalikate (Inactive) made changes -
            Assignee Swapnil Pandhare [ swapnil.pandhare ] Sudhir Kalikate [ sudhir.kalikate ]
            sudhir.kalikate Sudhir Kalikate (Inactive) logged work - 17/Nov/17 05:03 AM
            • Time Spent:
              8h
               

              Discussion with Niteen and Priya.
              Check code and unit testing.
              Reproduced and Made code changes.

            sudhir.kalikate Sudhir Kalikate (Inactive) made changes -
            Attachment WT-12126 Description.odt [ 67997 ]
            Hide
            sudhir.kalikate Sudhir Kalikate (Inactive) added a comment - - edited

            Hi Satya,

            I did some analysis on this. Tried multiple solutions on local and stage.
            Please refer document [WT-12126 Description.odt] on the analysis.
            WT-12126 Description.odt.

            Note: This is chrome browser specific issue and reproduced some times on Stage and Production.

            Thanks,
            Sudhir Kalikate

            Cc : Swapnil Pandhare

            Show
            sudhir.kalikate Sudhir Kalikate (Inactive) added a comment - - edited Hi Satya , I did some analysis on this. Tried multiple solutions on local and stage. Please refer document [WT-12126 Description.odt] on the analysis. WT-12126 Description.odt . Note: This is chrome browser specific issue and reproduced some times on Stage and Production. Thanks, Sudhir Kalikate Cc : Swapnil Pandhare
            sudhir.kalikate Sudhir Kalikate (Inactive) logged work - 18/Nov/17 05:04 AM
            • Time Spent:
              4h
               

              Tried with multiple solutions.

            swapnil.pandhare Swapnil Pandhare (Inactive) made changes -
            Remaining Estimate 24h [ 86400 ]
            Original Estimate 24h [ 86400 ]
            swapnil.pandhare Swapnil Pandhare (Inactive) made changes -
            Remaining Estimate 24h [ 86400 ] 22h [ 79200 ]
            Time Spent 2h [ 7200 ]
            Worklog Id 91514 [ 91514 ]
            swapnil.pandhare Swapnil Pandhare (Inactive) made changes -
            Assignee Sudhir Kalikate [ sudhir.kalikate ] Niteen Surwase [ niteen.surwase ]
            gaurav.sodani Gaurav Sodani (Inactive) made changes -
            Item State Parent values: Development(10200)Level 1 values: In Analysis(10204) Parent values: Development(10200)Level 1 values: On Hold(10207)
            Hide
            niteen.surwase Niteen Surwase (Inactive) added a comment -

            Hi Swapnil Pandhare

            We have tried various solutions but it did not worked for all the browsers (Either worked for Chrome or Firefox).
            We don't have control over all of our user's browsers to change their autocomplete/suggest settings.
            So, we can't disable these setting for Chrome and for other browsers.

            As per below Chrome official links. We can not do anything for the autocomplete setting. Its up to the user to use/not use it.

            Chrome Official autocomplete tickets:
            https://bugs.chromium.org/p/chromium/issues/detail?id=587466
            https://bugs.chromium.org/p/chromium/issues/detail?id=352347

            Thanks,
            Cc: Satya

            Show
            niteen.surwase Niteen Surwase (Inactive) added a comment - Hi Swapnil Pandhare We have tried various solutions but it did not worked for all the browsers (Either worked for Chrome or Firefox). We don't have control over all of our user's browsers to change their autocomplete/suggest settings. So, we can't disable these setting for Chrome and for other browsers. As per below Chrome official links. We can not do anything for the autocomplete setting. Its up to the user to use/not use it. Chrome Official autocomplete tickets: https://bugs.chromium.org/p/chromium/issues/detail?id=587466 https://bugs.chromium.org/p/chromium/issues/detail?id=352347 Thanks, Cc: Satya
            swapnil.pandhare Swapnil Pandhare (Inactive) logged work - 20/Nov/17 04:34 PM
            • Time Spent:
              4h
               

              Analysis , debugging and discussion

            niteen.surwase Niteen Surwase (Inactive) logged work - 20/Nov/17 05:00 PM
            • Time Spent:
              8.15h
               

              Analysis of Change Password Issue.
              Trial and Error various solution
              R & D for auto-complete

            niteen.surwase Niteen Surwase (Inactive) made changes -
            Remaining Estimate 22h [ 79200 ] 13.85h [ 49860 ]
            Time Spent 2h [ 7200 ] 10.15h [ 36540 ]
            Worklog Id 93121 [ 93121 ]
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Remaining Estimate 13.85h [ 49860 ] 11.85h [ 42660 ]
            Time Spent 10.15h [ 36540 ] 12.15h [ 43740 ]
            Worklog Id 93138 [ 93138 ]
            niteen.surwase Niteen Surwase (Inactive) logged work - 28/Nov/17 01:32 PM
            • Time Spent:
              3h
               

              Dummy field scenario checking
              Unit Testing

            niteen.surwase Niteen Surwase (Inactive) made changes -
            Remaining Estimate 11.85h [ 42660 ] 8.85h [ 31860 ]
            Time Spent 12.15h [ 43740 ] 15.15h [ 54540 ]
            Worklog Id 93302 [ 93302 ]
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Item State Parent values: Development(10200)Level 1 values: On Hold(10207) Parent values: Development(10200)Level 1 values: Ready for Review(10208)
            Hide
            niteen.surwase Niteen Surwase (Inactive) added a comment - - edited

            Hi Swapnil Pandhare

            We have done with changes using dummy field. We have set dummy field's visibility as hidden. We are just avoiding secret answer saving to tackle the security concern.
            Please review these changes.

            Following URL shows browsers scope for visibility of dummy field :
            URL : https://www.w3schools.com/jsref/prop_style_visibility.asp

            Concern : Browser displays secret answer in Change Password page. (Browsers uses Autocomplete feature)

            Cause : In EE workflow, when user change password with secret answers then browser considers field which is above Password field (Secret Answer) and saves. (Browser uses Autocomplete feature)

            Correction : We have added dummy hidden field above the password field to save in Autocomplete feature as username.
            Now browser considers dummy field as username to save through Autocomplete feature. So, Browser will not show secret answer anyhow.

            Thanks,
            Niteen S.

            Cc: Satya

            Show
            niteen.surwase Niteen Surwase (Inactive) added a comment - - edited Hi Swapnil Pandhare We have done with changes using dummy field. We have set dummy field's visibility as hidden. We are just avoiding secret answer saving to tackle the security concern. Please review these changes. Following URL shows browsers scope for visibility of dummy field : URL : https://www.w3schools.com/jsref/prop_style_visibility.asp Concern : Browser displays secret answer in Change Password page. (Browsers uses Autocomplete feature) Cause : In EE workflow, when user change password with secret answers then browser considers field which is above Password field (Secret Answer) and saves. (Browser uses Autocomplete feature) Correction : We have added dummy hidden field above the password field to save in Autocomplete feature as username. Now browser considers dummy field as username to save through Autocomplete feature. So, Browser will not show secret answer anyhow. Thanks, Niteen S. Cc: Satya
            niteen.surwase Niteen Surwase (Inactive) logged work - 29/Nov/17 01:06 PM
            • Time Spent:
              5.5h
               

              Coding for Change Password AutoComplete issue
              Unit Testing
              Discussion with Swapnil
              Code Review Patching

            niteen.surwase Niteen Surwase (Inactive) made changes -
            Remaining Estimate 8.85h [ 31860 ] 3.35h [ 12060 ]
            Time Spent 15.15h [ 54540 ] 20.65h [ 74340 ]
            Worklog Id 93570 [ 93570 ]
            swapnil.pandhare Swapnil Pandhare (Inactive) made changes -
            Remaining Estimate 3.35h [ 12060 ] 0h [ 0 ]
            Time Spent 20.65h [ 74340 ] 24.65h [ 88740 ]
            Worklog Id 93817 [ 93817 ]
            sudhir.kalikate Sudhir Kalikate (Inactive) made changes -
            Time Spent 24.65h [ 88740 ] 32.65h [ 117540 ]
            Worklog Id 94631 [ 94631 ]
            sudhir.kalikate Sudhir Kalikate (Inactive) made changes -
            Time Spent 32.65h [ 117540 ] 36.65h [ 131940 ]
            Worklog Id 94632 [ 94632 ]
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Link This issue is cloned by WT-12709 [ WT-12709 ]
            Hide
            niteen.surwase Niteen Surwase (Inactive) added a comment - - edited

            Hi Swapnil Pandhare

            This changes has been done and checked-in on trunk and LB as Its parent ticket WT-12109 is approved for LB.

            Thanks,
            Niteen S.

            Cc: Satya Gaurav Sodani

            Show
            niteen.surwase Niteen Surwase (Inactive) added a comment - - edited Hi Swapnil Pandhare This changes has been done and checked-in on trunk and LB as Its parent ticket WT-12109 is approved for LB. Thanks, Niteen S. Cc: Satya Gaurav Sodani
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Item State Parent values: Development(10200)Level 1 values: Ready for Review(10208) Parent values: Development(10200)Level 1 values: On Hold(10207)
            Hide
            niteen.surwase Niteen Surwase (Inactive) added a comment -

            Priya Dhamande This changes will be deployed on LB with next LB build. Please verify once it'll deploy on LB.

            Show
            niteen.surwase Niteen Surwase (Inactive) added a comment - Priya Dhamande This changes will be deployed on LB with next LB build. Please verify once it'll deploy on LB.
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Assignee Niteen Surwase [ niteen.surwase ] Priya Dhamande [ priya.dhamande ]
            niteen.surwase Niteen Surwase (Inactive) logged work - 07/Dec/17 05:00 PM
            • Time Spent:
              4.5h
               

              Coding for Change password
              Full length Unit Testing
              Check-in on Trunt, UIRefresh and LB

            khandu.kshirsagar Khandu Kshirsagar (Inactive) made changes -
            Item State Parent values: Development(10200)Level 1 values: On Hold(10207) Parent values: LB QA(10201)Level 1 values: LB Deployed(11600)
            niteen.surwase Niteen Surwase (Inactive) made changes -
            Time Spent 36.65h [ 131940 ] 41.15h [ 148140 ]
            Worklog Id 95435 [ 95435 ]
            priya.dhamande Priya Dhamande (Inactive) made changes -
            Assignee Priya Dhamande [ priya.dhamande ] Jayshree Nagpure [ jayshree.nagpure ]
            Hide
            priya.dhamande Priya Dhamande (Inactive) added a comment -

            Hi Jayshree Nagpure,

            As per discussion with Prasad, assigning jira to you.

            Prasad Pise

            Show
            priya.dhamande Priya Dhamande (Inactive) added a comment - Hi Jayshree Nagpure , As per discussion with Prasad, assigning jira to you. Prasad Pise
            jayshree.nagpure Jayshree Nagpure (Inactive) made changes -
            Status In Development [ 10007 ] Local Testing [ 10200 ]
            jayshree.nagpure Jayshree Nagpure (Inactive) made changes -
            Item State Parent values: LB QA(10201)Level 1 values: LB Deployed(11600) Parent values: LB QA(10201)Level 1 values: In Testing(10210)
            Hide
            jayshree.nagpure Jayshree Nagpure (Inactive) added a comment -

            Environment: LB
            Login: Partner, Employee and Company Admin
            Company: For QA KinderCare and For QA-FDU-Azure

            Browser: Chrome
            Pages: Change Password, Login page, Forgot password

            The issue of Password getting retained on browsers is verified on LB for mentioned pages. All the attached scenarios worked as expected.
            So, moving the jira on Ready for stage

            Show
            jayshree.nagpure Jayshree Nagpure (Inactive) added a comment - Environment: LB Login: Partner, Employee and Company Admin Company: For QA KinderCare and For QA-FDU-Azure Browser: Chrome Pages: Change Password, Login page, Forgot password The issue of Password getting retained on browsers is verified on LB for mentioned pages. All the attached scenarios worked as expected. So, moving the jira on Ready for stage
            jayshree.nagpure Jayshree Nagpure (Inactive) logged work - 19/Dec/17 12:54 PM
            • Time Spent:
              4h
               

              Testing on LB

            jayshree.nagpure Jayshree Nagpure (Inactive) made changes -
            Attachment TestCase_LoginPage.xls [ 70366 ]
            jayshree.nagpure Jayshree Nagpure (Inactive) made changes -
            Item State Parent values: LB QA(10201)Level 1 values: In Testing(10210) Parent values: LB QA(10201)Level 1 values: Ready for Stage(10213)
            jayshree.nagpure Jayshree Nagpure (Inactive) made changes -
            Time Spent 41.15h [ 148140 ] 45.15h [ 162540 ]
            Worklog Id 96873 [ 96873 ]
            sachin.hingole Sachin Hingole (Inactive) made changes -
            Resolution Done [ 10000 ]
            Status In LB Testing [ 10200 ] Resolution Setting [ 11616 ]
            Transition Time In Source Status Execution Times
            Niteen Surwase (Inactive) made transition -
            Open In Development
            1d 12h 48m 1
            Jayshree Nagpure (Inactive) made transition -
            In Development In LB Testing
            33d 8h 38m 1
            Sachin Hingole (Inactive) made transition -
            In LB Testing Resolution Setting
            127d 20h 4m 1

              People

              Assignee:
              jayshree.nagpure Jayshree Nagpure (Inactive)
              Reporter:
              priya.dhamande Priya Dhamande (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 24h Original Estimate - 24h
                  24h
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 45.15h
                  45.15h