On Sat, Nov 12, 2005 at 07:51:54PM +0100, Marc Lehmann <[EMAIL PROTECTED]> wrote: > Package: mozilla-browser > Version: 2:1.7.8-1 > Severity: normal > > > Mozilla fills in login/password into unrelated/different forms (different > url and different fields). This might or might not be a serious issue, as > mozilla doesn't check the type of the input field: maybe it is possible to > fetch login/pw information by hidden fields. In any case, mozilla fills in > data that originally was in a password (== write only) field into a normal > input field (== readable), so when this would happen in a public place the > password would be plainly visible.
Could you check if this still occurs with iceape, which replaces mozilla in etch ? Thanks Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
