Can JavaScript access autocomplete passwords?

Can JavaScript access autocomplete passwords, and is this considered a security risk? I know that saved passwords are usually strictly associated with a domain, but sometimes Chrome offers a username and password from another site if it does not currently have passwords stored for this domain.

(Maybe it depends on the browser)

+4
source share
2 answers

Chrome autofills details in two cases:

  • When explicitly said to remember credentials for a particular site
  • , , , ( )

JavaScript, .

, , .

+2

( ) javascript.

, javascript , .

, , javascript, , "type =" password "" type = ", blobs.

javascript , , , , .

, , , , .

, .

. -, localstorage.setitem(), suers , .

- HTTP-.

, , (Trouble).

+2

Source: https://habr.com/ru/post/1606092/


All Articles