Ever since Friday evening, my browser (Google Chrome), seems to believe that the Search bar on the website is actually the username field of the login page. It autofills it with my email every time.
Obviously this is a serious issue because if I were to screenshare or livestream myself navigating anywhere on the Roblox website, my personal email would be displayed immediately.
In order to fix this on my end I had to disable autofill for create.roblox.com specifically.
I believe it is more a roblox issue. Something about the search bar’s metadata was changed. Chrome doesn’t automatically assume every textbox on a website is a login field, and until very recently it never mistook the searchbar as one.
Okay, just tested it. It does occur on Microsoft Edge as well. It’s related to DevEx. It believes that the search bar on the website is the email bar on the DevEx page.
It didn’t seem like it would be an issue but this morning I had an issue where I accepted a ‘join’ notification from a friend while I was on the account I use for building but when the Roblox player launched and I joined - it was on my main account, which I wasn’t even logged in as.
So I had one account active in the browser and my other account in game on the Roblox player.
I wondered how this could happen until I realized that for whatever reason (maybe having something to do with the bundle detector?) - that search field placeholder was loading my live auto-fill login information and when the player launched, I was logged in via the search bar placeholder.
This does not seem very secure, and it was alarming to say the least.
eta: not the bundle detector, I was looking at the wrong thing
It doesn’t work on Firefox either for me, just seems to be Chrome. When in Chrome, my login information auto-fills in every instance of a search bar site-wide.