Ticket #602 (new defect)

Opened 9 months ago

Last modified 18 hours ago

Parser 2 unit tests fail with timeout

Reported by: masukomi.org Owned by: atul.toolness.com
Priority: blocker Milestone:
Component: builtin-commands Keywords: try-to-reproduce
Cc: sbirch.myopenid.com

Description

if you select the obfuscated text in a password field (the dots) and bring up Ubiquity it will display that text, thus revealing the person's password.

While it's reasonable to suggest that ubiquity should be able to access the contents of a password field (a password manager, for example, would need this) it is not reasonable to have them come in via the default mechanism for text that happens to be selected on the page when you bring up ubiquity.

Attachments

exposed_password.png (83.1 kB) - added by masukomi.org 9 months ago.
screenshot of exposed password
shadowed_password.jpg (85.4 kB) - added by sbirch.myopenid.com 8 months ago.
Picture of patch in action
password_protect.diff (0.7 kB) - added by sbirch.myopenid.com 8 months ago.
Shadows text selected from password inputs with astericks. Passes all the in-browser tests,

Change History

Changed 9 months ago by masukomi.org

screenshot of exposed password

Changed 8 months ago by sbirch.myopenid.com

Picture of patch in action

Changed 8 months ago by sbirch.myopenid.com

Shadows text selected from password inputs with astericks. Passes all the in-browser tests,

Changed 8 months ago by sbirch.myopenid.com

  • cc sbirch.myopenid.com added

Changed 3 weeks ago by www.google.com/accounts/o8/id?id=aitoawnbwo_pwhqsqxjjlpefo3uhuhpi55n_b7q

  • keywords try-to-reproduce added
  • priority changed from major to blocker
  • component changed from ubiquity-firefox-core to builtin-commands
  • summary changed from security bug: allows you to see contents of password fields to Parser 2 unit tests fail with timeout

Buy Our Replica tiffany jewelry online outlet is aimed to provide you the most comprehensive and detailed information of tiffany jewellery, earrings, bracelets,tiffany jewelry on sale and pendants at cheap prices.

A wide range of http://www.tiffanycoltd.comtiffany and co] A great many unique discount tiffany jewelry of latest styles and newest releases are waiting for your Coming and jewelry stores . The high quality and unique design will satisfy tiffany co your various needs and bring you the top luxury flavor.

Changed 3 weeks ago by www.google.com/accounts/o8/id?id=aitoawkclkx2iowpzwyrxpiaq6wrdn-gz_z3spc

I’d love to discuss louis vuitton handbags , but I am not sure if you really have one.
This louis vuitton bags is so unique, and I never see it’s sold in the LV stores, where did you get this one please?
This louis vuitton bag is just come out this spring show, it’s a totally new style oflv bags , worth to buy.
louis vuitton outlet Anyone know louis vuitton outlet near by? I am looking for one but never get.

Changed 18 hours ago by www.google.com/accounts/o8/id?id=aitoawluavlg7nmrcte2uxtc-2v9zbi-1qjrcck

replica watches should not be confused with the fake watch as the first one is a perfect clone of the original while the second one doesn't usually comply with the genuine product.

Rolex Air King replica watch,The MosAffordable? Rolex Rplica WatchThe? Rolex Air King has a great history that any aviation fan will appreciate.

The shine and quality of the bracelet, bezel and case looked exactly like the original which shows the high quality of this replicas watches.

Note: See TracTickets for help on using tickets.