Closed Bug 1071555 Opened 11 years ago Closed 11 years ago

Developer mode is used to steal passwords

Categories

(DevTools :: Inspector, defect)

35 Branch
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: barrerasantanaangel, Unassigned)

Details

(Keywords: sec-critical)

Attachments

(1 file)

User Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0 Build ID: 20140922030204 Steps to reproduce: I listened in some hacking blogs that is possible to see all the remembered passwords changing a value in developer mode so i decided to try this and it works only select the password and click "inspect element" and change the value "password" to "word" and the password is now visible in plane text Actual results: This is a security breach i suppose that and it makes easier to steal passwords from the browser
Component: Untriaged → Developer Tools: Inspector
Keywords: sec-critical
OS: Windows 8.1 → All
Hardware: x86_64 → All
This is the way the web works, it it not an exploit or security issue.
Group: core-security
Status: UNCONFIRMED → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
Product: Firefox → DevTools
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: