Email password is visible so it will easy to hack
Reported by
sangramb...@gmail.com,
Jul 28
|
||
Issue descriptionSteps to reproduce the problem: 1. Open gmail link in any browser 2. Enter user nane and password 3. Right click on password field and inspect element. 4. You will see the actual password is visible in data initial value attribute. What is the expected behavior? Actual Password should be invisible or in incrypted format. What went wrong? Actual Password is visible with decrypted format. Did this work before? N/A Chrome version: 68.0.3440.70 Channel: stable OS Version: Flash Version: As per my observation when i am trying to inspect element for Gmail user Password , It is visible the Actual Password.So it is not secure.If i saved my password as a remember. and Next time try to login and inspect user password field.Its clearly shows the actual password.It should not visible for security purpose.Please look into that.Please find attached screenshot.
,
Jul 30
Devtools has the ability to debug a page and this is an example of debugging the page. If a person has opened devtools and is examining the field then your machine is already comprimised. |
||
►
Sign in to add a comment |
||
Comment 1 by chelamcherla@chromium.org
, Jul 30