Closed Bug 408637 Opened 18 years ago Closed 18 years ago

Passwords in asterisks are revealed with a simple javascript

Categories

(Toolkit :: Form Manager, defect)

Product:
Toolkit
Component:
Form Manager
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
major

Tracking

()

Status:
VERIFIED DUPLICATE of bug 352761

People

(Reporter: akbar.banwa, Unassigned)

References

(
URL
)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11 When anyone is at a page with a masked password (asterisks in password field), this javascript code can allow anyone to view your passwords. Reproducible: Always Steps to Reproduce: 1. Go to a page where your password is shown as asterisks (not compatible with master password) 2. Enter the code into the address bar and press ENTER. 3. Password should be visible. Actual Results: The password was revealed Expected Results: Not shown anything except warn me about malicious scripts being executed.
Code can be found at my site, where users have worked further to implement it on all browsers
Status: UNCONFIRMED → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Group: security
Status: RESOLVED → VERIFIED
Product: Firefox → Toolkit
You need to log in before you can comment on or make changes to this bug.