Issue metadata
Sign in to add a comment
|
Security and privacy issue in google chrome password auto fill method
Reported by
prashant...@gmail.com,
Apr 12 2016
|
||||||||||||||||||||||
Issue descriptionPRIVACY ISSUE The passwords saved by google chrome isn't secured. VERSION: Chrome Version: Almost all the versions of google chrome Operating System: Almost all the operating system (checked in Windows and Linux) REPRODUCTION STEPS I've noticed that the username and passwords saved by google chrome is not safe. Although when some unauthorized person tries to see the password saved by google chrome in the settings, he is prompted to enter the password of the user account in order to see the the saved password. But let's say that my gmail's username and password is saved by google chrome and it automatically auto fills the username and password as soon as Gmail.com is opened. The password which is auto filled by google chrome could be easily seen by right clicking on the password box and selecting 'inspect element', then by changing the property of the password field from 'password' to 'text', the unauthorized person can easily see the password. This major security issue could be really dangerous if some unknown person tries use the browser in the owner's absence. It would be really nice if this issue could be fixed |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by battre@chromium.org
, Apr 12 2016Status: Duplicate (was: Untriaged)