Issue metadata
Sign in to add a comment
|
Chrome retains password temporarily even after clicking "Never" till the Browser tab is closed
Reported by
muralikr...@gmail.com,
Jul 5
|
||||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36 Steps to reproduce the problem: 1. Login to irctc.co.in 2. Click Never when asked to save password 3. Still password is retained and can be seen in plain text provided user has access previllege What is the expected behavior? What went wrong? Password is retained temporarily even after telling chrome to never same the password Did this work before? N/A Chrome version: 67.0.3396.99 Channel: stable OS Version: 10.0 Flash Version:
,
Jul 5
,
Jul 6
Thanks for filing the issue! Unable to reproduce the issue on reported chrome version 67.0.3396.99 using Windows 10 with the below mentioned steps. 1. Launched Chrome 2. Navigated to irctc.co.in 3. Entered credentials and logged in 4. Clicked on "Never" to save password. Under chrome://settings/passwords we didn't see any saved password for this site. @Reporter: Could you please let us know if we have missed anything, It would be helpful if elaborated on point#3 of comment#0 as we are not very clear about it.
,
Jul 9
Adding the screen shots, it may not be saving the passwords, but its retaining it during the session, even if i never want it too be retained. Logged in to site and asked chrome to never save password. still password exists. I log out of the site. Still password is retained in the tab. Which is obviously a security issue.
,
Jul 9
Thank you for providing more feedback. Adding the requester to the cc list. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 10
Ad #3 -- this is about accessing the passwords through the eye icon in the save bubble itself, not in about:settings/passwords. nepper@, vasilii@ -- if the user responds "Never" to the save bubble, but then opens the bubble again, they can see the password. Is this working as intended?
,
Jul 12
|
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by kenrb@chromium.org
, Jul 5Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug