Closed Bug 356145 Opened 19 years ago Closed 19 years ago

autocomplete caches data sent over https

Categories

(Toolkit :: Form Manager, defect)

Product:
Toolkit
Component:
Form Manager
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 190700

People

(Reporter: troels, Unassigned)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7 When a form is filled out in a page, served over https, the values are remembered in the fields history. This makes confidential information available outside of the secure page. Reproducible: Always Steps to Reproduce: 1. Open a form, served over https 2. Fill it out and press submit 3. close browser 4. Re-open the secure page (or some other page with a similar form) 5. Steal creditcard info.
*** This bug has been marked as a duplicate of 190700 ***
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.