1591665 - Easily read passwords in about:logins

Status: RESOLVED DUPLICATE of bug 1584126

(Firefox :: Untriaged, defect)

Description

[Bugzilla]

User Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 12_4_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604.1

Steps to reproduce:

-Open about:logins
-F12
-marc any password-Field showing *****
-Break „type=password“ By renaming it to anything else e.g.!“type=abc“

Actual results:

The password shows in clear text

Expected results:

Type of Password fields should not be editable
Or the passwords should not be stored in fields with type password

I guess this is not what you wanted as a security feature maybe it’s worth turning off of me F12 on the side
Or As AVM/Fritz.box does it

Do not use the clear password and the password field but any placeholder
Or Do not use the type = password but *** as placeholders and keep the password in memory instead

I guess I could have accessed all passwords by JavaScript but I have not tried this