Technical Bulletin: Chrome web browser ignores autocomplete

View some of the Frequently Asked Questions to our support staff. Included are some tips and tricks making this forum ideal for users getting started with GoAnywhere MFT. Note: Users can reply to existing topics but only our support staff can add new topics to this forum.
1 post Page 1 of 1

Support_Philip

User avatar
Posts: 44
Joined: Wed Jun 21, 2017 8:12 am

Post by Support_Philip » Wed Apr 23, 2014 9:07 am
Technical Bulletin: Chrome web browser ignores autocomplete form settings

Affected Software
GoAnywhere Services (all versions)
GoAnywhere Director (all versions)

Issue
A security feature of GoAnywhere products allowed users to determine whether a browser can save login credentials or not. The Allow Browsers to Save Login Credentials setting (illustrated below) is now being ignored in Google Chrome:
bulletinImage3.png
bulletinImage3.png (39.58 KiB) Viewed 2092 times

Details
Google released Chrome version 34 on April 10, 2014. By default, Chrome now ignores any website that uses the autocomplete=’off’ flag for password fields. When a user saves their login credentials for GoAnywhere in Chrome’s password manager, Chrome will automatically input their password when they create a resource, project, login method, and any other place where credentials are allowed.

The new Chrome browser behavior is especially problematic in the GoAnywhere Project Designer. For example, when a user is working on an FTP task, Chrome will automatically copy the user’s Username and Password to the “FTP Server” tab. The user may not realize Chrome has entered these values because they are hidden on another tab. When the user executes the Project, the Project will fail because it’s populating with the user’s GoAnywhere credentials rather than the FTP server’s credentials.

Recommended Solutions:
Users of GoAnywhere products have several options to alleviate the new Chrome behavior. Users can configure Chrome to: (1) no longer ignore a website’s autocomplete=’off’ setting, (2) disable the Chrome Password Manager, or (3) remove GoAnywhere sites from their saved password manager.

Option 1: Enable Autocomplete=’off’
1. Open the Chrome Browser.
2. Enter the following address and press enter: chrome://flags/#disable-ignore-autocomplete-off
3. The Disable ignore autocomplete=’off’ flag appears. Click Enable.
bulletinImage2.png
bulletinImage2.png (36.62 KiB) Viewed 2092 times


Option 2: Disable Password Manager
1. Open the Chrome Browser.
2. Click the Settings button to open the Settings page.
3. Click the Show advanced settings link.
4. Uncheck the Offer to save your web passwords setting.
bulletinImage1.png
bulletinImage1.png (78.31 KiB) Viewed 2092 times

Option 3: Manage Saved Passwords
1. Open the Chrome Browser.
2. Click the Settings button to open the Settings page.
3. Click the Show advanced settings link.
4. Click the Manage saved passwords link.
5. Remove any saved items for GoAnywhere sites.

Google will prompt the user to store their password the next time they login to a GoAnywhere site. The user should select the Never for this site option.
Philip Horn
Support Analyst
e. philip.horn@helpsystems.com
p. 1-800-949-4696
w. GoAnywhere.com | HelpSystems.com
1 post Page 1 of 1