{"action":"created","issue":{"url":"https://api.github.com/repos/bitwarden/web/issues/19","repository_url":"https://api.github.com/repos/bitwarden/web","labels_url":"https://api.github.com/repos/bitwarden/web/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/bitwarden/web/issues/19/comments","events_url":"https://api.github.com/repos/bitwarden/web/issues/19/events","html_url":"https://github.com/bitwarden/web/issues/19","id":184807664,"number":19,"title":"Browser exposing password","user":{"login":"Keetz","id":6707330,"avatar_url":"https://avatars.githubusercontent.com/u/6707330?v=3","gravatar_id":"","url":"https://api.github.com/users/Keetz","html_url":"https://github.com/Keetz","followers_url":"https://api.github.com/users/Keetz/followers","following_url":"https://api.github.com/users/Keetz/following{/other_user}","gists_url":"https://api.github.com/users/Keetz/gists{/gist_id}","starred_url":"https://api.github.com/users/Keetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Keetz/subscriptions","organizations_url":"https://api.github.com/users/Keetz/orgs","repos_url":"https://api.github.com/users/Keetz/repos","events_url":"https://api.github.com/users/Keetz/events{/privacy}","received_events_url":"https://api.github.com/users/Keetz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-24T10:49:28Z","updated_at":"2016-10-24T11:48:47Z","closed_at":null,"body":"When saving a new site to my vault on Firefox 49.0 the \"Would you like Firefox remember this login?\" pop-up exposes the password in the field where the user name usually shows.\r\n\r\nAs a test i created a new site:\r\n\r\nSite: http://test.com\r\nName: TestName\r\nUsername: TestUserName\r\nPassword: password123\r\n\r\n![firefox_issue](https://cloud.githubusercontent.com/assets/6707330/19642685/b1216fbe-99e6-11e6-8e8e-c22b43cf493c.png)\r\n\r\nMy concern is not that Firefox doesn't store it correct, i guess it is not supposed to save anything at all, but my concern is that it exposes the password in clear text, so anyone looking at your screen can see it.\r\n\r\nAlso tested in Chrome version 54.0.2840.59 (64-bit), same thing happens.\r\n![chrome_issue](https://cloud.githubusercontent.com/assets/6707330/19642903/d7a61486-99e7-11e6-87c9-e119d2a062fe.png)\r\n"},"comment":{"url":"https://api.github.com/repos/bitwarden/web/issues/comments/255718847","html_url":"https://github.com/bitwarden/web/issues/19#issuecomment-255718847","issue_url":"https://api.github.com/repos/bitwarden/web/issues/19","id":255718847,"user":{"login":"kspearrin","id":1190944,"avatar_url":"https://avatars.githubusercontent.com/u/1190944?v=3","gravatar_id":"","url":"https://api.github.com/users/kspearrin","html_url":"https://github.com/kspearrin","followers_url":"https://api.github.com/users/kspearrin/followers","following_url":"https://api.github.com/users/kspearrin/following{/other_user}","gists_url":"https://api.github.com/users/kspearrin/gists{/gist_id}","starred_url":"https://api.github.com/users/kspearrin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kspearrin/subscriptions","organizations_url":"https://api.github.com/users/kspearrin/orgs","repos_url":"https://api.github.com/users/kspearrin/repos","events_url":"https://api.github.com/users/kspearrin/events{/privacy}","received_events_url":"https://api.github.com/users/kspearrin/received_events","type":"User","site_admin":false},"created_at":"2016-10-24T11:48:47Z","updated_at":"2016-10-24T11:48:47Z","body":"Wow that's kind of weird. let me look into it and see if there is a fix. I think it has to do with the order if the input fields. In the meantime, you should probably just disable the Firefox password manager anyways since it is not necessary. "}}
{"actor":{"display_login":"kspearrin"}}