[PM-29763] Application Crash During Autofill with Illegal Special Characters in URI

[guillaumenibert]

Steps To Reproduce

1. Save a Login entry with illegal special characters in the URI field: turn:198.51.100.1:5349[Password1234][] (not https://turn:198.51.100.1:5349[Password1234][]).
2. Attempt to use the Android keyboard autofill feature on any site or application.
3. The autofill crashes and stops working for all sites and applications.

Expected Result

The application should handle illegal characters gracefully, either by sanitising the input or by displaying an error message before saving the new Login entry, rather than crashing the autofill feature.

Actual Result

The autofill crashes and becomes unusable across all sites and applications.

flight_recorder_2025-12-10_12-03-22_anonymised.txt

Screenshots or Videos

Additional Context

Since the Android Native update (2024.10.1), the autofill feature no longer works when certain illegal special characters are present in the URI field of a Login entry. Even a single Login entry with such characters causes the autofill to crash entirely.

While users should avoid including special characters at the end of a port or in the URI, mistakes or intentional inputs can happen.

Build Version

2025.11.1 (20994) - release/fdroid

What server are you connecting to?

US

Self-host Server Version

No response

Environment Details

No response

Issue Tracking Info

• I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

[bitwarden-bot]

Thank you for your report! We've added this to our internal board for review.
ID: PM-29763

[pamperer562580892423]

Another user here.

Even a single Login entry with such characters causes the autofill to crash entirely.

I can reproduce that with your example URI field entry turn:198.51.100.1:5349[Password1234][] on Android app 2025.12.0 - and I tested it with Brave (autofill integration enabled) and on Firefox.

[SergeantConfused]

Hello @guillaumenibert,

Thank you for your report. I was able to reproduce this behaviour and have flagged it to the Engineering department.
Please feel free to post additional information, such as screenshots or a screen video recordings, if you wish.

Thank you again,