New issue
Advanced search Search tips

Issue 793062 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: May 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Authenticated sessions on Chrome and "Remembered" are available on Opera

Reported by m.tahama...@gmail.com, Dec 7 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36

Steps to reproduce the problem:
1. Logon to any authenticated web application e.g. gmail or facebook using chrome, and select "remember" option when prompted
2. Open the same website on Opera browser installed through default settings during installation process

What is the expected behavior?
Opera browser logs into the same authenticated session probably using common cookies through underlying common libraries ( CEF etc).

What went wrong?
It should not be possible for one browser ( Opera) to log into authenticated session of a user in one web application done through another browser( Chrome). This is against user expectations and might even be a security loophole ( not sure about security aspect however).

Did this work before? N/A 

Chrome version: 62.0.3202.94  Channel: stable
OS Version: 10.0
Flash Version:
 
Labels: Needs-Triage-M62
Cc: pnangunoori@chromium.org
Components: UI>Browser>Passwords
Labels: Needs-Feedback
m.tahamasood@ -- Thanks for reporting this issue. Tested on the latest Chrome #66.0.3359.170 and was not able to reproduce the issue by following the below steps:

1. Launched the Chrome.
2. Navigated to facebook.com and enter credentials.
3. Save the password.
4. Launched Opera.
5. Observed that user is not able to view the saved facebook credentials in Opera browser.

Please verify by updating your Chrome to latest #66.0.3359.170 and you can also verify by resetting the profiles without any extensions.

Thanks!
Cc: vasi...@chromium.org
I didn't understand what exactly you "remembered" on logon?
Status: WontFix (was: Unconfirmed)
We can't proceed without feedback.

Sign in to add a comment