1016335 - The Password Fields can be converted to Normal Text format and passwords can be seen

Status: RESOLVED DUPLICATE of bug 933223

(Firefox :: Untriaged, defect)

Description

[Amith Kamath]

Attachment: FireFox_Issue.docx

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release)
Build ID: 20140506152807

Steps to reproduce:

1. Open Mozilla Firefox.
2. Enter any Site requesting for credentials (eg: https://mail.google.com)
3. Then Enter UserName and Password..
4. I get a Popup "Remember Password"
5. I say "Yes"
6. I Logout of the site... 
7. I Close the Firefox. 
8. I Open Firefox again and open the site.
9. Now my details are auto populated... (This expected,since i have asked to remember the password)
10. Now i click on the password Field.
11. Right Click and do Inspect Element..
12. I go to the password ID as an example shown below…
    <input id="Passwd" class="" type="password" placeholder="Password" name="Passwd">
13. I change the type from “password” to “text” and hit enter
14. The webpage then no longer shows the password as character instead shows the full password in text format… 
<input id="Passwd" class="" type="Text" placeholder="Password" name="Passwd"></input>
 I believe the inspect element tool should be restricted to change the Password Fields Type values, Else it can cause a security breach… 

Kindly advice if this BUG was already seen ,… do we have any plans or restricting the same.. Since it is a threat to security specially with shared computers in Internet Café’s…

I had reported a BUG 1016319 but that is not seen now... 



Actual results:

After changing the Type from "Password" to "Text" the Password field changed to Text type and the password is visible...


Expected results:

The Password Field should not be allowed to change the Type... the Inspect element tool should be restricted for changing the type's of password fields...