New issue
Advanced search Search tips

Issue 609540 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: May 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Password retrieval in Chrome

Reported by jipstoop...@gmail.com, May 5 2016 
VULNERABILITY DETAILS
When a password is saved it is shown as dots. If you click on the bar where the dots are and you click on "Inspect", you can change type="password" to type="text" to reveal the password. Not good if someone accidently had their password saved on a public computer.

VERSION
Chrome Version: 50.0.2661.94 + stable
Operating System: Windows 8 Enterprise

Comment 1 by f...@chromium.org, May 6 2016

Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
Thanks for the report!

However, this is expected behavior. Passwords are only shown as dots as a convenience (to prevent shoulder-surfing), not as a security feature. You can read about this more on our FAQ: http://www.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-
Project Member

Comment 2 by sheriffbot@chromium.org, Oct 1 2016 

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 2 2016 

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 4 by mbarbe...@chromium.org, Oct 2 2016

Labels: allpublic
►

Sign in to add a comment