Closed
Bug 1583120
Opened 6 years ago
Closed 6 years ago
Master dialog box is too simple and can easily be reproduced in a phising attack.
Categories
(Core :: Security: PSM, enhancement)
Core
Security: PSM
Tracking
()
RESOLVED
DUPLICATE
of bug 101611
People
(Reporter: pj.stanley, Unassigned)
Details
Attachments
(1 file)
|
6.67 KB,
image/png
|
Details |
Existing master password dialog-box
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36
Steps to reproduce:
Head to a website when master password is enabled. Firefox will prompt for the master password using a generic pop-up dialog box.
Actual results:
Password dialog pops up, but doesn't say what it is or what its for. This can be easily reproduced in a phishing attack.
Expected results:
Perhaps embed the master password user input request within the main window. In such a way that it cannot be reproduced from a website
|
||
Updated•6 years ago
|
Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
|
||
Updated•6 years ago
|
Component: Untriaged → Security: PSM
Product: Firefox → Core
You need to log in
before you can comment on or make changes to this bug.
Description
•