search

SeleniumHQ / selenium-ide

Open Source record and playback test automation for the web.
https://selenium.dev/selenium-ide/
Apache License 2.0
2.72k stars 739 forks source link

Chrome Extension Causes Inability to Login to Pandora.com #1798

Open davidrenne opened 3 months ago

davidrenne commented 3 months ago

🐛 Bug Report

I created a new profile with zero extensions. Was able to install with my password just fine in pandora.com. I have my first installed extension is selenium IDE. This wasnt just random. In a previous profile I had 6 extensions and installed one by one to find the extension causing this annoying bug. Why on earth would this extension cause or manipulate a login form without any recorded scripts running things!??!?!?

As a developer, I wanted to experiment with the latest project this had to offer, but I am uninstalling right now seeing how aggressive this is when passively installed doing stuff to the DOM or manipulating something affecting a popular site.

This is kind of insane that an automation tool does this to a form passively and this needs to be looked into. I wouldnt be surprised if it was an ad blocker that logins can fail, but not an automated test suite recorder extension.

Expected behavior

Dont manipulate this form in however the code is doing it in passive mode where no test suite is running.

Environment

OS: OSX Selenium IDE Version:

Browser: Chrome or Arc Browser Version: 122.0.6261.94

toddtarsi commented 3 months ago

My gosh, that sounds unpleasant. I'm not sure what happened here tbh. I don't think the webextension should do that, but tbh the webextension (v3) only has a few months of life left. If you're looking for a good R&P tool, and you don't want it to mess with your browser sessions, I'd recommend trying v4.

https://github.com/SeleniumHQ/selenium-ide/releases/tag/v4.0.1-alpha.99

It's a standalone binary, so it will never do anything at all with your existing browsers! The biggest headache to it is that updating sucks (have to uninstall and then reinstall) until I get code-signing certificates. I'm going to pay for them out of pocket later this month.

toddtarsi commented 3 months ago

Oh also v4 does a lot of other stuff better too (shares a runtime with side-runner, so CI playback is much more consistent for example). It's just about coming out of alpha into beta, so there are still some bugs, but it's pretty stable. I've been using it for work for a bit over a year now.