So I just made a change password form for my rails app. It's just like any other very typical password change form.
So after a few times testing it out I started seeing a popup box saying
"Please confirm which user you are changing the password for"
Now this really freaked me out a bit since I know I did not write any code to do such things and I definitely do not want users to change other users' passwords.
I soon found out it was firefox's password manager. So now I'm calmed down about it, but still, I don't want this to happen to other people using my site.
How does firefox know it's changing a password anyways? Maybe it's the names of my password fields or maybe even my forms action url (/account/change_password)? Is there a way to make it not do this? Has anyone else had experience with this?