Closed Bug 1016319 Opened 12 years ago Closed 12 years ago

The Password entered in Firefox can be seen as pure Text rather than Hidden field when we go into Inspect Element..

Categories

(Firefox :: Untriaged, defect)

29 Branch
x86_64
Windows 7
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 933223

People

(Reporter: ami85kams, Unassigned)

Details

Attachments

(1 file)

459.94 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document
Details
Attached file FireFox_Issue.docx
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release) Build ID: 20140506152807 Steps to reproduce: 1. Open Mozilla Firefox. 2. Enter any Site requesting for credentials (eg: https://mail.google.com) 3. Then Enter UserName and Password.. 4. I get a Popup "Remember Password" 5. I say "Yes" 6. I Logout of the site... 7. I Close the Firefox. 8. I Open Firefox again and open the site. 9. Now my details are auto populated... (This expected,since i have asked to remember the password) 10. Now i click on the password Field. 11. Right Click and do Inspect Element.. 12. I go to the password ID as an example shown below… <input id="Passwd" class="" type="password" placeholder="Password" name="Passwd"> 13. I change the type from “password” to “text” and hit enter 14. The webpage then no longer shows the password as character instead shows the full password in text format… <input id="Passwd" class="" type="Text" placeholder="Password" name="Passwd"></input> I believe the inspect element tool should be restricted to change the Password Fields Type values, Else it can cause a security breach… Kindly advice if this BUG was already seen ,… do we have any plans or restricting the same.. Since it is a threat to security specially with shared computers in Internet Café’s… Actual results: After changing the Type from "Password" to "Text" the Password field changed to Text type and the password is visible... Expected results: The Password Field should not be allowed to change the Type... the Inspect element tool should be restricted for changing the type's of password fields...
CC list accessible: false
Not accessible to reporter
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: