New issue
Advanced search Search tips

Issue 723545 link

Starred by 2 users
Status: WontFix
Owner: ----
Closed: May 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Security



Sign in to add a comment

ask for os-user password before deleting entries in password manager

Reported by alexplus...@gmail.com, May 17 2017 
UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36

Steps to reproduce the problem:
1. open password settings 
2. delete a login-password-entry
3. 

What is the expected behavior?
chromium should ask at least once for my password before deleting an entry, like it does, when I want to see the password for an entry.

What went wrong?
the entry can just be deleted. So basically, anybody can do damage by deleting passwords.

Did this work before? No 

Chrome version: 58.0.3029.110  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 25.0 r0

Comment 1 by elawrence@chromium.org, May 17 2017

Components: UI>Browser>Passwords
Status: WontFix (was: Unconfirmed)
Sure, anyone with access to your computer can do far worse; they can delete all of your files, they can install malware, they can smash it with a hammer, etc.

https://dev.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model-
Project Member

Comment 2 by sheriffbot@chromium.org, Aug 24 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment