New issue
Advanced search Search tips

Issue 861671 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 9
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security


Participants' hotlists:
Hotlist-1


Sign in to add a comment

Security:

Reported by rajat.pa...@hiddenbrains.in, Jul 9

Issue description

In Version 67.0.3396.87 (Official Build) (64-bit) ,
When user login in gmail or anther site , after successful login , save password pop-up show , when user click on never save password dialog will close but key icon not disappear and also user can view password from this dialog ..it can be big security bug ..
   
 
Screenshot from 2018-07-09 13-00-20.png
275 KB View Download
Status: WontFix (was: Unconfirmed)
Thanks for the report.

We explain in our Security FAQ why local attacks, which would require the attacker to be logged into your account on your computer, are not security vulnerabilities in Chrome: https://dev.chromium.org/Home/chromium-security/security-faq#TOC-What-about-unmasking-of-passwords-with-the-developer-tools-
but anyone can view when you are not present..in previous version ,user can't show password ..if you think it's not a bug then ok, your choice
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 15

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment