Issue metadata
Sign in to add a comment
|
User can paste data inside the test by pressing down on CTRL/V from the material from the login screen
Reported by
ad...@tdsstudentlogin.com,
Nov 30 2016
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.2.14 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.14 Platform: 8743.85.0 Steps to reproduce the problem: 1. At the login screen, type any characters in the EMAIL Address bar and copy it either right-click or ctrl+c. 2. Launch the Kiosk-app ‘AIRSecureTest’ from apps selection and select “Oregon” as the state from the drop down. 3. On the “Please Sign In” screen focus the cursor on the ‘First Name’ text field. Hold down ctrl+v. What is the expected behavior? Clipboard should be cleared/clean every time Secure Test is launched. Nothing from outside the test should be able to be pasted inside the test. What went wrong? User can paste data inside the test by pressing down on CTRL/V for couple of seconds in particular fields where text can be typed. Like Textbox and Notepad. If characters are numeric, user is allowed to paste them into calculator. WebStore page: https://chrome.google.com/webstore/detail/airsecuretest/hblfbmjdaalalhifaajnnodlkiloengc Did this work before? Yes N/A Chrome version: 54.0.2840.101 Channel: stable OS Version: 54.0.2840.101 Flash Version: 23.0.0.207
,
Dec 16 2016
will remote session works for you to show the changes?
,
Feb 14 2017
,
Feb 28 2017
,
Feb 28 2017
The problem is reproducible on M-56 Beta build 9000.41.0.
I typed in a random e-mail address ("xyxxy") on the login screen, copied it, then launched the AIRSecure Test kiosk app. Selected Oregon for the state and continued to the sign-in screen.
It isn't enough just to type ctrl-V; you have to hold both down for a second or two, then the First Name text area gets filled with the clip-board contents, all upper-cased ("XYZZYXYZZYXYZZY...").
,
Feb 28 2017
,
Feb 28 2017
Typo on the M-56 build number above; it should be 9000.91.0.
,
Apr 27 2017
Someone has fixed the problem by M-58 Stable build 9334.58.0, chrome 58.0.3029.89. Verified copied text from outside an app cannot be pasted inside the app. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by maxkirsch@chromium.org
, Dec 1 2016