New issue
Advanced search Search tips

Issue 771440 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Saving Password Leak? Maybe?

Reported by driftxa...@gmail.com, Oct 4 2017

Issue description

When saving a password on Chromium, like bank account, Facebook account, twitter, etc. When, for example, trying to login to Facebook or an email account, and password are saved, if you use "Inspect Element" to change the "<input>" type, from any website with a saved password, from "Password" to "Text", you can actually see the password, thus having the password.

Chromium Version: 61.0.3163.100
Running on Linux

P.S. Not sure if this was on purpose, or an actual security flaw/bug, sorry if this isn't considered as an actual flaw/bug, but it's worth noticing.
 
Labels: -Restrict-View-SecurityTeam allpublic
Status: WontFix (was: Unconfirmed)
Please see https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#what-about-unmasking-of-passwords-with-the-developer-tools

Sign in to add a comment