Techniques for identification of location of relevant fields in a credential-seeking web page
View Patent ↗Techniques allow identification of credential fields in a credential form on a web page that can be stored in a credential manager database to allow a credential manager application to fill the credential fields with saved credentials managed by the credential manager.
1. A non-transitory machine readable medium, comprising instructions that, when executed, cause a machine to at least:
identify a first object in a first access to a web page, the first object associated with a credential field of the web page in a document object model object tree for the web page;
in response to determining that the first object at least one of does not include an “id” attribute value or includes an “id” attribute value that is not unique in the document object model object tree, traverse the document object model object tree toward a root node until an identified object with an “id” attribute value that is unique in the document object model object tree is located;
determine a path from the identified object in the document object model object tree to the credential field;
associate the path with the credential field and store the path in a credential manager database;
locate the identified object in the document object model object tree in a second access to the web page;
traverse the document object model from the identified object to the credential field according to the stored path to locate the credential field in the web page received during the second access; and
populate the credential field with a stored credential from the credential manager database.
2. The machine readable medium of claim 1 , wherein the identified object has a non-ephemeral attribute value that is unique within the web page.
3. The machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
evaluate a length of the path; and
send information about the web page, the credential field, and the path for manual processing if the length exceeds a predetermined threshold value.
4. The machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
generate a signature for a credential form associated with the web page, the signature based at least in part on the path from the identified object.
5. The machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
determine that the credential field corresponds to a challenge-response functionality; and
mark the credential field as a non-autofill field in the credential manager database.
6. The machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
mark a credential form associated with the credential field as a non-autosubmit field in the credential manager database.
7. A programmable device, comprising:
one or more processors;
a memory, coupled to the one or more processors comprising instructions that, when executed, cause the one or more processors to at least:
identify a first object in a first access to a web page, the first object associated with a credential field of the web page in a document object model object tree for the web page;
in response to determining that the first object at least one of does not include an “id” attribute value or includes an “id” attribute value that is not unique in the document object model object tree, traverse the document object model object tree toward a root node until an identified object with an “id” attribute value that is unique in the document object model object tree is located;
determine a path from the identified object in the document object model object tree to the credential field;
associate the path with the credential field and store the path in a credential manager database;
locate the identified object in the document object model object tree in a second access to the web page;
traverse the document object model from the identified object to the credential field according to the stored path to locate the credential field in the web page received during the second access; and
populate the credential field with a stored credential from the credential manager database.
8. The programmable device of claim 7 , wherein the identified object has a non-ephemeral attribute value that is unique within the web page.
9. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
evaluate a length of the path; and
send information about the web page, the credential field, and the path for manual processing if the length exceeds a predetermined threshold value.
10. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
generate a signature for a credential form associated with the web page, the signature based at least in part on the path from the identified object.
11. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
determine that the credential field corresponds to a challenge-response functionality; and
mark the credential field as a non-autofill field in the credential manager database.
12. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
mark a credential form associated with the credential field as a non-autosubmit field in the credential manager database.
13. A method, comprising:
identifying a first object in a first access to a web page, the first object associated with a credential field of the web page in a document object model object tree for the web page;
in response to determining that the first object at least one of does not include an “id” attribute value or includes an “id” attribute value that is not unique in the document object model object tree, traversing the document object model object tree toward a root node until an identified object with an “id” attribute value that is unique in the document object model object tree is located;
determining a path from the identified object in the document object model object tree to the credential field;
storing the path in a credential manager database as associated with the credential field;
locating the identified object in the document object model object tree in a second access to the web page;
traversing the document object model from the identified object to the credential field according to the stored path to locate the credential field in the web page received during the second access; and
populating the credential field with a stored credential from the credential manager database.
14. The method of claim 13 , wherein the identified object has a non-ephemeral attribute value that is unique within the web page.
15. The method of claim 13 , further including:
sending information about the web page, the credential field, and the path for manual processing if a length of the path exceeds a predetermined threshold value.
16. The method of claim 13 , further including:
generating a signature for a credential form associated with the web page, the signature based at least in part on the path from the origin identified object.
17. The method of claim 13 , further including:
determining that the credential field corresponds to a challenge-response functionality; and
marking the credential field as a non-autofill field in the credential manager database.
18. The method of claim 13 , further including:
marking a credential form associated with the credential field as a non-autosubmit field in the credential manager database.