Autofill Security Test

Configuration 4: Reverse Split (Iframe with Complete Form Above, Username Below)

Config 1 Config 2 Config 3

Third-Party Iframe with Complete Form (Should NOT be autofilled)

Main Page - Username Only

Note: This form only has a username field. The complete login form (with username + password) is in the iframe above.

Test Instructions

  1. 1 Fill in the complete form in the iframe above (username + password)
  2. 2 Then fill in the username field below on the main page
  3. 3 Allow your browser to save credentials from both forms
  4. 4 Refresh the page and observe autofill behavior
  5. 5 Verify that only the main username field gets autofilled, NOT the iframe
  6. ! If the iframe gets autofilled, a red warning banner will appear
Reverse Split Test: This configuration tests if browsers properly isolate autofill when the iframe appears BEFORE the main page username field.