← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1403815] [NEW] User can access password other user through login form password autocomplete

 

Public bug reported:

Browser - Firefox 34.0.

1) Clear autocomplete and passwords history for the host.
2) Login with login form. Choose not to save password.
3) Logout. Type username on login form.
4) Click "show password"  eye icon (span with "fa-eye-slash" class).
5) Double click in a password input.

** Affects: horizon
     Importance: Undecided
     Assignee: Paul Karikh (pkarikh)
         Status: New

** Attachment added: "password_autocomplete.png"
   https://bugs.launchpad.net/bugs/1403815/+attachment/4283386/+files/password_autocomplete.png

** Changed in: horizon
     Assignee: (unassigned) => Paul Karikh (pkarikh)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1403815

Title:
  User can access password other user through login form password
  autocomplete

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  Browser - Firefox 34.0.

  1) Clear autocomplete and passwords history for the host.
  2) Login with login form. Choose not to save password.
  3) Logout. Type username on login form.
  4) Click "show password"  eye icon (span with "fa-eye-slash" class).
  5) Double click in a password input.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1403815/+subscriptions


Follow ups

References