New issue
Advanced search Search tips

Issue 725210 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: May 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Exploit that involves auto complete

Reported by swagonfl...@gmail.com, May 22 2017

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home
/chromium-security/security-faq

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.

VERSION
Chrome Version: [x.x.x.x] + [stable, beta, or dev]
Operating System: [Please indicate OS, version, and service pack level]

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]

Google chrome
If you highlight password and change the type to text for password then the users password will be exposed. 
 

Comment 1 by wfh@chromium.org, May 23 2017

Labels: -Restrict-View-SecurityTeam
Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)
Hi, thanks for your report. This is by design and is specifically addressed in the Chrome Security FAQ (Frequently Asked Questions)

https://dev.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-

this is because anyone who has physical access to your machine to go into developer tools and change the type to 'text' has full control of your computer and could do anything including but not limited to reading all of your data.

I recommend if you are worried about this, you put a strong OS password on your computer and always lock your screen when you are away from your computer.
Project Member

Comment 2 by sheriffbot@chromium.org, Aug 29 2017

Labels: allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment