anttiviljami/browser-autofill-phishing

Credit Card Numbers are vulnerable.

Closed this issue · 3 comments

Please see arrju's jsfiddle here.

Credit card numbers are just as vulnerable as any.

See here.

This posts the following:

"form": {
    "cardholder": "Fake Card", 
    "cc_cvv": "", 
    "cc_month": "11", 
    "cc_number": "123456789012345", 
    "cc_year": "2017"
  }, 

I guess that was to be expected, but I certainly think this should be included with the demo.

Yes, please include CCs into this.

@anttiviljami I've opened a PR to implement this. #6 should do so

dandv commented

If CCs are vulnerable, this should be mentioned in the README. The press picked this up but (unsurprisingly) referred in vague terms to whether CC #s are vulnerable or not.