We offer to save card locally on Linux but do not offer to save unmasked server card |
||||||||
Issue descriptionChrome Version: 58.* OS: Linux What steps will reproduce the problem? (1) Do not sign-in to Chrome. (2) Visit dump-truck.appspot.com and fill forms with default values and submit. (3) Chrome should offer to save card locally (See: https://cs.chromium.org/chromium/src/components/autofill/core/browser/autofill_manager.cc?l=1232&rcl=4dd065a3be8399b968ae44e93f1997254c173e84) (4) Save a card on payments.google.com (5) Sign-to Chrome (6) Visit dump-truck.appspot.com and fill form by unmasking a card saved in step (4). (7) Chrome will not offer to save the card locally (See: https://cs.chromium.org/chromium/src/components/autofill/core/browser/autofill_experiments.cc?l=162&rcl=4dd065a3be8399b968ae44e93f1997254c173e84) What is the expected result? We should either allow both saves or neither. What is the difference (security-wise) between these 2 cases? What happens instead? We only offer save for local cards, not unmasked server cards.
,
May 25 2017
This doesn't sound like a security bug, only a functional issue.
,
May 25 2017
,
May 25 2017
https://bugs.chromium.org/p/chromium/issues/detail?id=162735 is apparently the reason we don't offer to save unmasked cards locally (https://cs.chromium.org/chromium/src/components/autofill/core/browser/autofill_experiments.cc?l=162&rcl=4dd065a3be8399b968ae44e93f1997254c173e84) but I would expect this bug to also prevent us from saving any card locally - i.e. why does bug 162735 not apply to https://cs.chromium.org/chromium/src/components/autofill/core/browser/autofill_manager.cc?l=1232&rcl=4dd065a3be8399b968ae44e93f1997254c173e84 ?
,
Jun 27 2017
,
Jul 14 2017
,
Sep 14 2017
,
May 1 2018
,
Aug 3
This bug has an owner, thus, it's been triaged. Changing status to "assigned". |
||||||||
►
Sign in to add a comment |
||||||||
Comment 1 by sheriffbot@chromium.org
, May 25 2017