New issue
Advanced search Search tips

Issue 624292 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jun 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: saved passwords reveal

Reported by lucaboss...@gmail.com, Jun 29 2016

Issue description

VULNERABILITY DETAILS

If I have a saved password in chrome for a webpage and open that webpage I see the login form filled with user and password. So, if I right click on the form and click on inspect element ("Ispeziona" in italian) I can modify the tag of the password text box from type="password" to type="text" and see the saved password.

VERSION
Chrome Version: 51.0.2704.103 stable
Operating System: Windows 10 build 1151

REPRODUCTION CASE

EXAMPLE

<input type="password" name="password" id="password" class="form-control">

changing it to 

<input type="text" name="password" id="password" class="form-control">

let me see the saved password in the textbox


Have a good day. 
Luca.

 
Project Member

Comment 2 by sheriffbot@chromium.org, Oct 6 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment