Techniques for identification of location of relevant fields in a credential-seeking web page
Techniques allow identification of credential fields in a credential form on a web page that can be stored in a credential manager database to allow a credential manager application to fill the credential fields with saved credentials managed by the credential manager.
1. A non-transitory machine readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:
identify a first object in a first access to a web page, the first object associated with a credential field of a web page in a document object model object tree for the web page;
in response to determining that the first object includes an ephemeral “id” attribute value, traverse the document object model object tree toward a root node until an identified object with an “id” attribute value that is not ephemeral is located;
determine a path from the identified object in the document object model object tree to the credential field;
store the path in a credential manager database;
traverse the document object model from the identified object to the credential field according to the stored path to locate the credential field in the web page received during a second access; and
populate the credential field with a stored credential from the credential manager database.
2. The non-transitory machine readable medium of claim 1 , wherein the identified object has a non-ephemeral attribute value that is unique within the web page.
3. The non-transitory machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
evaluate a length of the path; and
send information about the web page, the credential field, and the path for manual processing if the length exceeds a predetermined threshold value.
4. The non-transitory machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
generate a signature for a credential form associated with the web page, the signature based at least in part on the path from the identified object.
5. The non-transitory machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
determine that the credential field corresponds to a challenge-response functionality; and
mark the credential field as a non-autofill field in the credential manager database.
6. The non-transitory machine readable medium of claim 1 , wherein the instructions, when executed, further cause the machine to:
mark a credential form associated with the credential field as a non-autosubmit field in the credential manager database.
7. A programmable device, comprising:
one or more processors;
a memory, coupled to the one or more processors comprising instructions that, when executed, cause the one or more processors to at least:
identify a first object in a first access to a web page, the first object associated with a credential field of the web page in a document object model object tree for the web page;
in response to determining that the first object includes an ephemeral “id” attribute value, traversing the document object model object tree toward a root node until an identified object with an “id” attribute value that is not ephemeral is located;
determine a path from the identified object in the document object model object tree to the credential field;
store the path in a credential manager database;
traverse the document object model from the identified object to the credential field according to the stored path to locate the credential field in the web page received during a second access; and
populate the credential field with a stored credential from the credential manager database.
8. The programmable device of claim 7 , wherein the identified object has a non-ephemeral attribute value that is unique within the web page.
9. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
evaluate a length of the path; and
send information about the web page, the credential field, and the path for manual processing if the length exceeds a predetermined threshold value.
10. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
generate a signature for a credential form associated with the web page, the signature based at least in part on the path from the identified object.
11. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
determine that the credential field corresponds to a challenge-response functionality; and
mark the credential field as a non-autofill field in the credential manager database.
12. The programmable device of claim 7 , wherein the instructions, when executed, further cause the one or more processors to:
mark a credential form associated with the credential field as a non-autosubmit field in the credential manager database.
13. A method, comprising:
identifying a first object in a first access to a web page, the first object associated with a credential field of the web page in a document object model object tree for the web page;
in response to determining that the first object includes an ephemeral “id” attribute value, traversing the document object model object tree toward a root node until an identified object with an “id” attribute value that is not ephemeral is located;
determining a path from the identified object in the document object model object tree to the credential field;
storing the path in a credential manager database;
traversing the document object model from the identified object to the credential field according to the stored path to locate the credential field in the web page received during a second access; and
populating the credential field with a stored credential from the credential manager database.
14. The method of claim 13 , wherein the identified object has a non-ephemeral attribute value that is unique within the web page.
15. The method of claim 13 , further including:
sending information about the web page, the credential field, and the path for manual processing if a length of the path exceeds a predetermined threshold value.
16. The method of claim 13 , further including:
generating a signature for a credential form associated with the web page, the signature based at least in part on the path from the credential field to the identified object.
17. The method of claim 13 , further including:
determining that the credential field corresponds to a challenge-response functionality; and
marking the credential field as a non-autofill field in the credential manager database.
18. The method of claim 13 , further including:
marking a credential form associated with the credential field as a non-autosubmit field in the credential manager database.