New issue
Advanced search Search tips

Issue 781569 link

Starred by 2 users
Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Nov 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Ability to reveal passwords in chrome

Reported by domste...@gmail.com, Nov 5 2017 

VULNERABILITY DETAILS
When passwords are stored either in chrome or filled by a password manager, you can right click and inspect element, change the field type to "text" and the password is displayed in plain text.

VERSION
Chrome Version: 61.0.3163.100 + stable
Operating System: Windows 10 1709 64 Bit
Chrome Bug.PNG
39.4 KB View Download

Comment 1 by elawrence@chromium.org, Nov 8 2017

Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)
Please see https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools for discussion of why this and other physically local attacks are outside of the browser's threat model.
Project Member

Comment 2 by sheriffbot@chromium.org, Feb 14 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment