{"id":105127,"date":"2022-09-18T09:36:45","date_gmt":"2022-09-18T07:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda"},"modified":"2022-09-18T09:36:45","modified_gmt":"2022-09-18T07:36:46","slug":"v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","title":{"rendered":"Une fuite de mots de passe a \u00e9t\u00e9 d\u00e9tect\u00e9e dans Chrome \u00e0 partir des champs de saisie masqu\u00e9e.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un probl\u00e8me a \u00e9t\u00e9 d\u00e9tect\u00e9 dans le navigateur Chrome concernant l'envoi de donn\u00e9es sensibles vers les serveurs de Google lorsque le mode de v\u00e9rification orthographique avanc\u00e9 est activ\u00e9, impliquant une v\u00e9rification via un service externe. Le probl\u00e8me se manifeste \u00e9galement dans le navigateur Edge lors de l'utilisation de l'extension Microsoft Editor. <\/p>\n

Il s'est av\u00e9r\u00e9 que le texte \u00e0 v\u00e9rifier est \u00e9galement transmis \u00e0 partir de formulaires de saisie contenant des donn\u00e9es sensibles, y compris des champs contenant des noms d'utilisateur, des adresses, des emails, des donn\u00e9es de passeport et m\u00eame des mots de passe, si les champs de saisie de mot de passe ne sont pas limit\u00e9s par la balise standard . Par exemple, ce probl\u00e8me entra\u00eene l'envoi vers serveur<\/a> www.googleapis.com de mots de passe en cas d'activation de l'option de visualisation du mot de passe, mise en \u0153uvre dans les services Google Cloud (Secret Manager), AWS (Secrets Manager), Facebook, Office 365, Alibaba Cloud et LastPass. Sur 30 sites reconnus test\u00e9s, y compris des r\u00e9seaux sociaux, des banques, des plateformes cloud et des magasins en ligne, 29 se sont r\u00e9v\u00e9l\u00e9s vuln\u00e9rables \u00e0 cette fuite. <\/p>\n

Chez AWS et LastPass, le probl\u00e8me a d\u00e9j\u00e0 \u00e9t\u00e9 rapidement r\u00e9solu en ajoutant le param\u00e8tre \u00ab spellcheck=false \u00bb dans la balise \u00ab input \u00bb. Pour emp\u00eacher l'envoi de donn\u00e9es c\u00f4t\u00e9 utilisateur, il convient de d\u00e9sactiver dans les param\u00e8tres la v\u00e9rification avanc\u00e9e (section \u00ab Languages\/Spell check\/Enhanced spell check \u00bb ou \u00ab Langues\/V\u00e9rification orthographique\/V\u00e9rification avanc\u00e9e \u00bb, par d\u00e9faut la v\u00e9rification avanc\u00e9e est d\u00e9sactiv\u00e9e).

\"Une<\/center> 1\t
\"Une<\/center>
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Edge \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Microsoft Editor. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0442\u0435\u043a\u0441\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 \u0444\u043e\u0440\u043c \u0432\u0432\u043e\u0434\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105128,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105127","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47D\u00e9tection d'une fuite de mots de passe dans Chrome \u00e0 partir de champs avec aper\u00e7u de saisie cach\u00e9e | ProHoster","description":"Un probl\u00e8me a \u00e9t\u00e9 d\u00e9tect\u00e9 dans le navigateur Chrome concernant l'envoi de donn\u00e9es sensibles vers les serveurs de Google lorsque le mode de v\u00e9rification orthographique avanc\u00e9 est activ\u00e9, impliquant une v\u00e9rification via un service externe.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u043f\u043e\u043b\u0435\u0439 \u0441 \u043f\u0440\u0435\u0434\u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u043c \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-18T07:36:46+00:00","article:modified_time":"2022-09-18T07:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/105127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=105127"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/105127\/revisions"}],"predecessor-version":[{"id":173008,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/105127\/revisions\/173008"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/105128"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=105127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=105127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=105127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}