New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 860447 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 820696
Owner: ----
Closed: Jul 12
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Chrome retains password temporarily even after clicking "Never" till the Browser tab is closed

Reported by muralikr...@gmail.com, Jul 5

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36

Steps to reproduce the problem:
1. Login to irctc.co.in
2. Click Never when asked to save password
3. Still password is retained and can be seen in plain text provided user has access previllege

What is the expected behavior?

What went wrong?
Password is retained temporarily even after telling chrome to never same the password

Did this work before? N/A 

Chrome version: 67.0.3396.99  Channel: stable
OS Version: 10.0
Flash Version:
 
Components: UI>Browser>Passwords
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Labels: Needs-Triage-M67
Cc: vamshi.kommuri@chromium.org
Labels: Triaged-ET Needs-Feedback
Thanks for filing the issue!

Unable to reproduce the issue on reported chrome version 67.0.3396.99 using Windows 10 with the below mentioned steps.
1. Launched Chrome
2. Navigated to irctc.co.in
3. Entered credentials and logged in
4. Clicked on "Never" to save password.
Under chrome://settings/passwords we didn't see any saved password for this site.

@Reporter: Could you please let us know if we have missed anything, It would be helpful if elaborated on point#3 of comment#0 as we are not very clear about it. 
Adding the screen shots, it may not be saving the passwords, but its retaining it during the session, even if i never want it too be retained.

Logged in to site and asked chrome to never save password.
still password exists.
I log out of the site. Still password is retained in the tab. Which is obviously a security issue.


Chrome temp password issue.docx
446 KB Download
Project Member

Comment 5 by sheriffbot@chromium.org, Jul 9

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding the requester to the cc list.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: vasi...@chromium.org nepper@chromium.org
Ad #3 -- this is about accessing the passwords through the eye icon in the save bubble itself, not in about:settings/passwords.

nepper@, vasilii@ -- if the user responds "Never" to the save bubble, but then opens the bubble again, they can see the password. Is this working as intended?
Mergedinto: 820696
Status: Duplicate (was: Unconfirmed)

Sign in to add a comment