Password in auto fill can be made visible even in secure banking sites
Reported by
sridhars...@gmail.com,
Dec 7 2017
|
|
Issue descriptionUserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 Steps to reproduce the problem: 1. right click on password field 2. change type from password to text using developer tools 3. What is the expected behavior? Ideally autofill passwords should not be made visibile What went wrong? Saved password is clearly visible Did this work before? No Chrome version: 62.0.3202.94 Channel: n/a OS Version: OS X 10.13.1 Flash Version: I previously reported on a similar issue back in 2011-2012. That was when we add a click event and place an alert(this.value). But this was being handled by recent chrome extensions for some banking applications. The above one is still not handled |
|
►
Sign in to add a comment |
|
Comment 1 by paulir...@chromium.org
, Dec 8 2017