196216 - saved passwords are submited as default value of javascript:prompt()

Status: RESOLVED DUPLICATE of bug 184436

(Firefox :: General, defect)

Description

[travis]

User-Agent:       Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.3a) Gecko/20021207 Phoenix/0.5 ...or is it?
Build Identifier: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.3a) Gecko/20021207 Phoenix/0.5

on any page or link that uses javascript:prompt() the default saved password is
automatically submitted as the return value of the prompt() without the prompt
even displaying on my machine

Reproducible: Always

Steps to Reproduce:
1. save a network password
2. go to a page that uses javascript:prompt()
3. see if the prompt() works

Actual Results:  
the network password that i have saved is returned as the value of the prompt()

Expected Results:  
the javascript:prompt() should have been displayed, requiring me to enter in a
value, or prefilled with a value specified in the parameter passed into prompt()

Phoenix 0.5 on WinNT 4.0 sp 6, this problem is a huge security risk if a user
were to store sensitive passwords and a site were to exploit them.

Comment 1

[travis]

i've only had this bug in Phoenix 0.5 on WinNT

Comment 2

[Phil Schwartau]

Setting default owner and QA -

Comment 3

[Jesse Ruderman]

Already fixed in nightlies.

*** This bug has been marked as a duplicate of 184436 ***

Comment 4

[Daniel Veditz [:dveditz]]

Dupe of public bug, clearing security flag