182883 - Contents of password form field revealed in Links tab of Page Info.

Status: RESOLVED DUPLICATE of bug 121792

(SeaMonkey :: Page Info, defect)

Description

[Kevin Wiley]

User-Agent:       Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.2) Gecko/20021126
Build Identifier: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.2) Gecko/20021126

When a password is entered into a form password field, that password is
displayed in plain text as a "Form Submission" link in the Links tab of the Page
Info dialog. I have confirmed this for the site above as well as EarthLink
webmail, both secure and insecure. This could be especially significant where a
password field has been auto-filled.

Reproducible: Always

Steps to Reproduce:
1. Go to any page with a password field.
2. Enter a password.
3. Open the Page Info dialog.
4. Select the Links tab.
Actual Results:  
The password is revealed in plaintext as a "Form Submission" link.

Expected Results:  
The password should be in asterisks, or not appear at all.

Comment 1

[Matthias Versen [:Matti]]

The password is hidden for me.
Possible also a 1.2 bug. Please try again with 1.2.1 (which should be released
in 1-2 days) or a nightly 1.3a build.

Comment 2

[Kevin Wiley]

Identical behavior is occurring with 1.2.1 on PPC Linux (self-built).

User-Agent: Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.2) Gecko/20021203

Comment 3

[Daniel Brooks [:db48x]]

If I'm going to fix this, I need a testcase. Take a page that exhibits the
error, and remove as much of the html as you can while still showing the bug. A
small testcase will be much easier for me to debug and test with.

Comment 4

[Kevin Wiley]

Attachment: Testcase: Password Field

Comment 5

[Kenneth Herron]

Using linux build ID 20030226. I can't reproduce this. I loaded the testcase,
typed something into the password field, and opened the page info dialog. The
form is mentioned on the "Forms" tab, but the password field value displays as
asterisks. The "Links" tab has nothing listed.

Kevin, could you try this with a current copy of mozilla and update this bug
report with the result?

Comment 6

[Daniel Wang]

*** This bug has been marked as a duplicate of 121792 ***