242956 - Stored password is inserted into a readable text input on a second page

Status: RESOLVED FIXED

(Toolkit :: Password Manager, defect)

Description

[Austin Lockwood]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Build Identifier: 

See the example page above (I'll leave it up for now, please let me know when 
you've finished with it) - clear the password store for this domain, enter a 
user name/password combination on the example page (any will do) and submit the 
form - on the second page your username is already inserted in the first box 
and your password is shown in clear text in the second.  This happens with both 
the Windows and the Linux version of FireFox - could be something to do with 
the name of the form, or the ID of the text boxes?  It looks a bit like I'm 
cheating here, but there is no server side code - the second page only has a 
asp extension because IIS won't allow posting to a static page.

Reproducible: Always
Steps to Reproduce:
1.See above, and example page
2.
3.

Actual Results:  
See above

Expected Results:  
Both boxes on the second page should have been empty

Comment 1

[Brian Ryner (not reading)]

Confirmed, the password manager should not prefill a password into an input
that's not type=password, even if the ID matches.

Comment 2

[chris hofmann]

might need a fix for this before 0.9

Comment 3

[Brian Ryner (not reading)]

Attachment: patch

Only prefill if the username field is type=text and the password field is
type=password.

Comment 4

[Brian Ryner (not reading)]

checked in to trunk and aviary branch

Comment 5

[Brian Ryner (not reading)]

Attachment: test1.htm

test1.htm from the testcase

Comment 6

[Brian Ryner (not reading)]

Attachment: test2.asp

test2.asp from the testcase

Comment 7

[Daniel Veditz [:dveditz]]

serious privacy implications but not an exploit (site already knows your
password). And basically the same is already public in bug 233075 --> removing
security sensitive flag.

Comment 8

[Brian Ryner (not reading)]

*** Bug 233075 has been marked as a duplicate of this bug. ***