Recently I created my first website (self-taught), which is hosted on Firebase.
Now that I added Firebase Email/Password authentication for my users here: https://ottigan.com/dailyChecking/main.html
Whenever anyone, using Chrome browser, inputs a password that they use anywhere else, Chrome instantly marks my website as Dangerous: screenshot of the issue.
Chrome setting which triggers the issue: Settings => Privacy and security => Security => Enhanced Protection
I have checked my site for security/malware issues (nothing came up) on:
- transparencyreport.google.com
- sitecheck.sucuri.net
Could this be related to me having poorly constructed login form? Considering most of authentication is handled with the Firebase API in my client side .js? When creating my login form, I did try to follow Firebase documentation and the suggestions provided: https://developers.google.com/web/fundamentals/security/credential-management/save-forms
During the past couple of months, there have been numerous threads on https://support.google.com/chrome/ People complaining about a similar issue, but it seems like it never goes anywhere.
Some examples:
- https://support.google.com/webmasters/thread/28400888?hl=en
- https://support.google.com/chrome/thread/42621564?hl=en
- https://support.google.com/webmasters/thread/38218347?hl=en
In addition there is a closed Chromium Bug report seemingly related to the issue I am struggling with:
I would appreciate any help that I could get! My first stackoverflow post... CHECK! :)