New issue
Advanced search Search tips

Issue 707502 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Can see the password inside text box signing into google in google chrome

Reported by josiahst...@gmail.com, Apr 1 2017

Issue description

Hey,
When I was signing into google using google chrome I inspected the text box and noticed that if i change the type from password to text it will show the text instead of the hashes, if someone creates a hack for this they can grab access to everyone's email accounts. 

They could do this by infecting a PC with a trojan that can copy the html just before an unsuspected user signs in grabbing the password and email
I have attached screen shots to give a better example.

VERSION
Chrome Version: [55.0.2883] + [stable]
Operating System: Windows 10 Professional]

Thanks, Josiah
 
EG 1.PNG
233 KB View Download
EG 2.PNG
234 KB View Download
Labels: -Restrict-View-SecurityTeam allpublic
Status: WontFix (was: Unconfirmed)
This does not represent a security vulnerability in Chrome. This is described in detail in this FAQ: https://www.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-

Sign in to add a comment