Closed Bug 272006 Opened 20 years ago Closed 20 years ago

Possibility of faking the master password prompt

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit
Component:
Password Manager
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 101611

People

(Reporter: kosta_kp, Assigned: bryner)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Win98; rv:1.7.3) Gecko/20041001 Firefox/0.10.1
Build Identifier: Mozilla/5.0 (Windows; U; Win98; rv:1.7.3) Gecko/20041001 Firefox/0.10.1

The master password prompt looks too much like a regular Javascript prompt.
Sites could fake this prompt and get users' master passwords.

Make the prompt clearly identifiable with Firefox and put in a warning about the
possibility of spoofs.

Reproducible: Always
Steps to Reproduce:

*** This bug has been marked as a duplicate of 101611 ***
Group: security
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.