1608367 - Password entry mask

Status: RESOLVED DUPLICATE of bug 992569

(Toolkit :: Password Manager, defect)

Description

[Thomas Oskk]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.3

Steps to reproduce:

start Firefox and one other application that requires entry of a password in a separate mask like Firefox, then minimise both

Actual results:

You have two entry masks for passwords, but you can not decide which is from Firefox and which is not, when neither of them shows to which program it belongs.
That is a security risk, because it's possible to steal the Firefox password.

Expected results:

The password entry mask should:

• have the name of the programme on it (i.e., Firefox)
• it should not be independent from Firefox, i.e., can be on screen, but also in the background of another window, when Firefox is minimised.
• the entry mask should be in foreground as soon as Firefox gets restored, but minimised when FF is minimised.

Comment 1

[Thomas Oskk]

it's not exactly a defect report, but it's neither a request for enhancement. It's a security risk.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Comment 3

[Matthew N. [:MattN]]

Are you talking about the master password dialog or some other UI? If the latter, please include a screenshot of what you mean.

Comment 4

[Thomas Oskk]

Attachment: Maste Password Entry Mask.jpg

Yes, it's the entry mask of the master password, screenshot added.

Comment 5

[Matthew N. [:MattN]]

Duping to bug 992569 but there are other existing bugs on the other issues mentioned.