{"id":105127,"date":"2022-09-18T09:36:45","date_gmt":"2022-09-18T07:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda"},"modified":"2022-09-18T09:36:45","modified_gmt":"2022-09-18T07:36:46","slug":"v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","title":{"rendered":"In Chrome \u00e8 stata rilevata una fuga di password dai campi con anteprima di input nascosto","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In Google Chrome \u00e8 stato riscontrato un problema nell'invio di dati sensibili ai server Google quando \u00e8 attivata la modalit\u00e0 avanzata di correzione ortografica, che implica l'utilizzo di un servizio esterno per il controllo. Il problema si manifesta anche nel browser Edge quando si utilizza l'estensione Microsoft Editor. <\/p>\n

Si \u00e8 scoperto che il testo per la verifica viene inviato anche da moduli di input contenenti dati riservati, inclusi i campi che contengono nomi utente, indirizzi, email, dati del passaporto e anche password, nel caso in cui i campi di input delle password non siano limitati dal tag standard <input type=password>. Ad esempio, il problema porta all'invio di server<\/a> www.googleapis.com di password se \u00e8 attivata l'opzione per visualizzare la password inserita, implementata nei servizi Google Cloud (Secret Manager), AWS (Secrets Manager), Facebook, Office 365, Alibaba Cloud e LastPass. Dei 30 siti noti testati, inclusi social network, banche, piattaforme cloud e negozi online, 29 sono risultati vulnerabili a perdite di dati. <\/p>\n

In AWS e LastPass, il problema \u00e8 stato gi\u00e0 risolto rapidamente aggiungendo il parametro <spellcheck=false> al tag <input>. Per bloccare l'invio di dati dal lato utente, \u00e8 necessario disattivare nelle impostazioni la verifica ortografica avanzata (sezione <Languages\/Spell check\/Enhanced spell check> o <Lingue\/Pulizia ortografica\/Controllo avanzato>, la verifica avanzata \u00e8 disattivata per impostazione predefinita).

\"In<\/center> 1\t
\"In<\/center>
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Edge \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Microsoft Editor. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0442\u0435\u043a\u0441\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 \u0444\u043e\u0440\u043c \u0432\u0432\u043e\u0434\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105128,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105127","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47In Chrome \u00e8 stata riscontrata una fuga di password da campi con anteprima di input nascosto | ProHoster","description":"In Google Chrome \u00e8 stato riscontrato un problema nell'invio di dati sensibili ai server Google quando \u00e8 attivata la modalit\u00e0 avanzata di correzione ortografica, che implica l'utilizzo di un servizio esterno.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u043f\u043e\u043b\u0435\u0439 \u0441 \u043f\u0440\u0435\u0434\u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u043c \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-18T07:36:46+00:00","article:modified_time":"2022-09-18T07:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/105127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=105127"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/105127\/revisions"}],"predecessor-version":[{"id":173008,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/105127\/revisions\/173008"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/105128"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=105127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=105127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=105127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}