undefined | Better HN

0 pointspushrax4y ago0 comments

Most likely because credit card forms are very often served in iframes. 1Password fills iframes too (though maybe only for cards, not sure).

0 comments

2 comments · 1 top-level

mfer4y ago· 1 in thread

1Password fills iframes based on their domain rather than the parents. If you have an entry in 1Password it will use the value for the domain of the iframe.

I’ve gone so far as to test this.

In my opinion this is the right security model

pushraxOP4y ago

That definitely makes sense for logins.

j / k navigate · click thread line to collapse