Safari overwrites passwords for subdomains

Originator:aefimov.box
Number:rdar://FB9423281 Date Originated:29/07/2021
Status:Open Resolved:
Product:Safari Product Version:14.1.2 (16611.3.10.1.3)
Classification:Passwords Reproducible:Always
 
Some sites has subdomains with different account. For example: paypal.com and sandbox.paypal.com. So, we need two users and two password to it. If i will use same email: user@icloud.me for both domain Safari will damage previous one:

1. Register in sandbox.paypal.com with user@icloud.me, generate password by Safari and save it
2. Then try to login into Sandbox using saved login and password from Safari Vault, should work
3. Go to paypal.com and register usual account for the same email user@icloud.me, generate password by Safari and save it
4. Then try to login into general paypal.com with saved login and password from Safari Vault, should work
5. Try to return into sandbox.paypal.com, press logout if you logged in.
6. Try to login using saved login and password suggested by Safari, should FAIL, it start using password from general paypal.com, instead of sandbox.paypal.com
7. Try to check Safari/Settings/Passwords, search for paypal. You will found only one entry for both paypal.com and sandbox.paypal.com with the same password, last one generated. Previous one is lost. There are also no history for password change, so you unable to find that information and need to recover password.
8. Then you recovering password from sandbox.paypal.com, Safari will overwrite previous paypal.com password by new one.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!