[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-28 Thread codesite-noreply
Updates: Cc: b...@chromium.org Comment #8 on issue 23219 by aba...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 It sounds like the main motivation here is to match other browsers, but we don't have a clear

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-28 Thread codesite-noreply
Comment #9 on issue 23219 by js...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 The reason IME is disabled in other browsers (and *Chrome on Windows*. see issue 3234) is that in many web sites, passwords are only ASCII (or at

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-28 Thread codesite-noreply
Updates: Labels: i18n Comment #10 on issue 23219 by js...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 I don't think this is a security bug as discussed earlier, but I'm leaving the flag on just in case. -- You

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-28 Thread codesite-noreply
Updates: Status: Available Comment #11 on issue 23219 by js...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 (No comment was entered for this change.) -- You received this message because you are listed in the owner or

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-28 Thread codesite-noreply
Updates: Labels: -Security Comment #12 on issue 23219 by aba...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 That sounds like a good reason to change our behavior here. Sounds like we should support the ime-mode CSS

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Status: Unconfirmed Owner: tha...@chromium.org CC: hb...@chromium.org, su...@chromium.org, a...@chromium.org, jer...@chromium.org Labels: OS-Mac Area-BrowserUI Pri-2 Type-Bug Security New issue 23219 by su...@chromium.org: IME should be disabled in password box.

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Comment #1 on issue 23219 by aba...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 Forgive my ignorance, but how does one acquire such an evil IME (and how does it differ from a generic key logger)? -- You received this

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Updates: Cc: aba...@chromium.org Comment #2 on issue 23219 by aba...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 (No comment was entered for this change.) -- You received this message because you are listed in the

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Comment #3 on issue 23219 by su...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 There are lots of close source IMEs for Mac around the world. I'm using one. No one can guarantee that such an IME won't do any evil things. And

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Comment #4 on issue 23219 by aba...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 If the evil IME is running on your system, what stops it from recording all of your keystrokes and sending them to the attacker's server? I

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Comment #5 on issue 23219 by su...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 Hmm, good argument. I don't know if it's possible for a running IME to intercept all my keystrokes on Mac, maybe it's possible. Anyway,

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Comment #6 on issue 23219 by aba...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 If it's not a security issue, what's the motivation for making this change? It seems like folks who have non- english passwords would find an

[chromium-bugs] Issue 23219 in chromium: IME should be disabled in password box.

2009-09-27 Thread codesite-noreply
Comment #7 on issue 23219 by su...@chromium.org: IME should be disabled in password box. http://code.google.com/p/chromium/issues/detail?id=23219 It's my original opinion, but then I was convinced by following reasons: 1. Security concern (maybe invalid). 2. Common practices adopted by all