Closed Bug 329597 Opened 18 years ago Closed 18 years ago

"View saved passwords" should ask for the master password

Categories

(Toolkit :: Password Manager, defect)

Product:
Toolkit
Component:
Password Manager
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 259648

People

(Reporter: pascal, Unassigned)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

Currently, clicking the "View saved passwords" button in the "Passwords" tabs of the options directly displays the list of saved passwords (at least if the master password has been entered during the session). 

This is dangerous, because somebody may have had access to the machine. Possible solutions:

1- Always ask again for the master password before showing the list.
2- Ask for it only if the master password was not entered during, say, the last two minutes.

Reproducible: Always

Steps to Reproduce:
Reporter, please search before filing a bug.

*** This bug has been marked as a duplicate of 259648 ***
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.