Autofill Security Test

Configuration 3: Split Form Fields (Username Above, Iframe with Complete Form)

Config 1 Config 2 Config 4

Main Page - Username Only

Note: This form only has a username field. The complete login form (with username + password) is in the iframe below.

Test Instructions

  1. 1 Fill in the username field above
  2. 2 Then fill in the complete form in the iframe below (username + password)
  3. 3 Allow your browser to save credentials from both forms
  4. 4 Refresh the page and observe autofill behavior
  5. 5 Verify that only the main username field gets autofilled, NOT the iframe
  6. ! If the iframe gets autofilled, a red warning banner will appear
Split Field Test: This configuration tests if browsers properly isolate autofill when form fields are split between the main page and iframe.

Third-Party Iframe with Complete Form (Should NOT be autofilled)