Don't immediately fill saved passwords in Incognito mode.

chrome/browser/password_manager/password_form_manager.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/password_manager/password_form_manager.h"
 
 #include <algorithm>
 
 #include "base/metrics/histogram.h"
 #include "base/string_split.h"
@@ skipping 275 matching lines @@
   DCHECK(!best_matches_.empty());
   if (!preferred_match_)
     preferred_match_ = best_matches_.begin()->second;
 
   // Check to see if the user told us to ignore this site in the past.
   if (preferred_match_->blacklisted_by_user) {
     manager_action_ = kManagerActionBlacklisted;
     return;
   }
 
-  // Proceed to autofill (note that we provide the choices but don't
-  // actually prefill a value if the ACTION paths don't match).
-  bool wait_for_username = observed_form_.action.GetWithEmptyPath() !=
-                           preferred_match_->action.GetWithEmptyPath();
+  // Proceed to autofill.
+  // Note that we provide the choices but don't actually prefill a value if
+  // either: (1) we are in Incognito mode, or (2) the ACTION paths don't match.
+  bool wait_for_username =
+      profile_->IsOffTheRecord() ||
+      observed_form_.action.GetWithEmptyPath() !=
+          preferred_match_->action.GetWithEmptyPath();
   if (wait_for_username)
     manager_action_ = kManagerActionNone;
   else
     manager_action_ = kManagerActionAutofilled;
   password_manager_->Autofill(observed_form_, best_matches_,
                               preferred_match_, wait_for_username);
 }
 
 void PasswordFormManager::OnPasswordStoreRequestDone(
     CancelableRequestProvider::Handle handle,
@@ skipping 161 matching lines @@
   return score;
 }
 
 void PasswordFormManager::SubmitPassed() {
   submit_result_ = kSubmitResultPassed;
 }
 
 void PasswordFormManager::SubmitFailed() {
   submit_result_ = kSubmitResultFailed;
 }