HexBrain

Yelp · Report #1720621

Autofill/Autosave password on login

N/Astatus
mediumseverity
4upvotes
11 Oct 2022disclosed

Summary

The reporter disclosed that autocomplete is enabled on the Yelp login page. Our response: "Auto-completing passwords is generally considered a user-friendly feature. Additionally, some browsers now ignore the autocomplete=off on passwords."

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original