Issue metadata
Sign in to add a comment
|
Security: saved passwords reveal
Reported by
lucaboss...@gmail.com,
Jun 29 2016
|
||||||||||||||||||
Issue description
VULNERABILITY DETAILS
If I have a saved password in chrome for a webpage and open that webpage I see the login form filled with user and password. So, if I right click on the form and click on inspect element ("Ispeziona" in italian) I can modify the tag of the password text box from type="password" to type="text" and see the saved password.
VERSION
Chrome Version: 51.0.2704.103 stable
Operating System: Windows 10 build 1151
REPRODUCTION CASE
EXAMPLE
<input type="password" name="password" id="password" class="form-control">
changing it to
<input type="text" name="password" id="password" class="form-control">
let me see the saved password in the textbox
Have a good day.
Luca.
,
Oct 6 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by thestig@chromium.org
, Jun 29 2016