4 ms·
The issue described in the linked article is a vulnerability where credentials set to reprompt for use still autofill into fields on the page. This doesn't see
by abandonliberty 12y ago
The issue described in the linked article is a vulnerability where credentials set to reprompt for use still autofill into fields on the page.
This doesn't seem like intended behavior and I'm surprised it hasn't been fixed yet.
In any case, couldn't you avoid it by simply turning off the autofill function as well for that credential? Then in order to access the site you would need to go through the menu and reprompt.
Update: The other weaknesses addressed in the following have been resolved in my chrome instance of lastpass https://news.ycombinator.com/item?id=6622154 https://news.ycombinator.com/item?id=6622154