New issue
Advanced search Search tips

Issue 772479 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 771371
Owner: ----
Closed: Oct 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug-Security



Sign in to add a comment

Password field not masked in Canary

Reported by victorsu...@gmail.com, Oct 6 2017

Issue description

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.

VERSION
Chrome Version 63.0.3231.0 (Official Build) canary (64-bit)
Operating System: [windows 7 Enterprise service pack 1]

REPRODUCTION CASE
Password for login is visible in the interface
Attached image - Chrome bug  

 
chrome bug.png
78.4 KB View Download

Comment 1 Deleted

Can you provide more information, e.g. either a public URL that reproduces this, or the HTML source (right-click that element and choose "Inspect" and then take a screenshot of the markup)?

If you visit http://http-login.badssl.com, is the password masked for you?
Components: UI>Browser>Autofill
Labels: -Needs-Feedback OS-Windows Pri-1
Status: Untriaged (was: Unconfirmed)
I'm seeing this happen on a number of sites with autofill in 63.0.3231.0 on Windows. Masking is returned to the control when it is focused.
After updating the same machine to 3235, this does not seem to repro.
Mergedinto: 771371
Status: Duplicate (was: Untriaged)
Project Member

Comment 6 by sheriffbot@chromium.org, Jan 14 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment