441877 - Username and password will be shown even if password saved option is not checked

Status: RESOLVED DUPLICATE of bug 259996

(Toolkit :: Password Manager, defect)

Description

[Nancy B.]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0

I found that after login into a secure site. Then click on more information for security information. Then click view saved passwords (eventhough there are not password saved, but when a we click on "Clear" button, the sites, username, and passwords that were on the session will be shown!

Reproducible: Always

Steps to Reproduce:
1.login into a secure site
2.click more information for security information
3. click view saved passwords (no passwords have been saved for the site)
4. click on "Clear" button and a list of sites, username will appear (sites that are currently on session, e.g. foxmarks and meebo sidebar)
5. click on "Show Passwords" tada! You can see the all passwords!

Comment 1

[:Gavin Sharp [email: [e-mail]]]

It's not clear what bug you're describing. Being able to see saved passwords is a feature, not a bug (you can set a master password if you want to prevent casual snooping.)

Comment 2

[Justin Dolske [:Dolske]]

Nothing security sensitive here, and it's the same issue as bug 259996.