[GH-ISSUE #1135] Already saved password can be readable or visible #760

Closed
opened 2026-02-25 22:38:01 +03:00 by kerem · 3 comments
Owner

Originally created by @shuricksumy on GitHub (Apr 22, 2022).
Original GitHub issue: https://github.com/floccusaddon/floccus/issues/1135

Which version of floccus are you using?

4.13.1

Sync method

{"label"=>"Nextcloud Bookmarks"}

Which browser are you using?

Chrome, Firefox

Which version of Nextcloud Bookmarks are you using? (if relevant)

No response

Which version of Nextcloud? (if relevant)

No response

What kind of WebDAV server are you using? (if relevant)

No response

Describe the Bug

Hi,
I think it's a bit not secure to have the possibility to see the password which was already filed out.

image

Expected Behavior

Only new password which is printing can be visible.
Already saved password should be always hidden by ****

To Reproduce

  1. Setup browser extension
  2. Fill up settings
  3. Save
  4. Open edit or review these settings
  5. Press "eye" icon near password field

Actual result: Already saved password is visible
Expected result: Already saved password should be always hidden

Debug log provided

  • I have provided a debug log file
Originally created by @shuricksumy on GitHub (Apr 22, 2022). Original GitHub issue: https://github.com/floccusaddon/floccus/issues/1135 ### Which version of floccus are you using? 4.13.1 ### Sync method {"label"=>"Nextcloud Bookmarks"} ### Which browser are you using? Chrome, Firefox ### Which version of Nextcloud Bookmarks are you using? (if relevant) _No response_ ### Which version of Nextcloud? (if relevant) _No response_ ### What kind of WebDAV server are you using? (if relevant) _No response_ ### Describe the Bug Hi, I think it's a bit not secure to have the possibility to see the password which was already filed out. ![image](https://user-images.githubusercontent.com/12009686/164616891-862f5de8-acee-4a2e-8293-f0cb301c2750.png) ### Expected Behavior Only new password which is printing can be visible. Already saved password should be always hidden by **** ### To Reproduce 1. Setup browser extension 2. Fill up settings 3. Save 4. Open edit or review these settings 5. Press "eye" icon near password field Actual result: Already saved password is visible Expected result: Already saved password should be always hidden ### Debug log provided - [ ] I have provided a debug log file
kerem 2026-02-25 22:38:01 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@pinpontitit commented on GitHub (Apr 22, 2022):

I agree with you and I wish it could be different.
However this is not a bug.

You can read the reasons from the developer on this other topic:
https://github.com/floccusaddon/floccus/issues/1077

<!-- gh-comment-id:1106986275 --> @pinpontitit commented on GitHub (Apr 22, 2022): I agree with you and I wish it could be different. However this is not a bug. You can read the reasons from the developer on this other topic: https://github.com/floccusaddon/floccus/issues/1077
Author
Owner

@marcelklehr commented on GitHub (Apr 30, 2022):

I consulted the nextcloud design team and they confirmed, it's advisable not to allow this. Thanks for your feedback :)

<!-- gh-comment-id:1113975414 --> @marcelklehr commented on GitHub (Apr 30, 2022): I consulted the nextcloud design team and they confirmed, it's advisable not to allow this. Thanks for your feedback :)
Author
Owner

@github-actions[bot] commented on GitHub (May 1, 2023):

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

<!-- gh-comment-id:1529228185 --> @github-actions[bot] commented on GitHub (May 1, 2023): This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/floccus#760
No description provided.