Disable password autofill on page load

[darkdh]

Description

https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/

Steps to Reproduce

1. Go to https://senglehardt.com/demo/no_boundaries/loginmanager/
2. Submit username/password and save password using built-in password manager
3. 3rd party script will steal your password and display on the page

Actual result:

Username and password get sniffed

Expected result:
No username and password will get leaked when page load

Reproduces how often:

Brave Version

about:brave info:

Reproducible on current live release:

Additional Information

[darkdh]

For QA: new result will be like this

1. Hidden fields

2. Non hidden fields

[srirambv]

@darkdh should the autofill prompt the moment the page is loaded for which a credential is saved?

[darkdh]

@srirambv expected because private tab won't popup credentials automatically. it requires user interaction just like you did.