Web Hack List

Collected research

Auto-Complete Hack by Hiding Filled in Input Fields with CSS

Why you should not use autocomplete • Yoast

Chrome's autocompletetype form filling populates fields the page has hidden with CSS, so a signup form that visibly asks only for an email can silently harvest a full postal address and card details. A live test page demonstrates it, and the advice is to switch browser autofill off until the controls improve.

Record

Document
Why you should not use autocomplete • Yoast
Researcher
Joost de Valk
Published by
Yoast
Date
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Joost de Valk, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .