CREDENTIAL_CAPTURE: Component asks for credentials
| Severity | Fault | Stage |
|---|---|---|
| error | customer (the source package) | build output |
What it means
Section titled “What it means”The component has a password field (type password, autocomplete current-password or new-password), a payment card field (cc-number, cc-csc, a field named cardNumber or cvv) or the text of a login it imitates (sign in with Google, verify your account, your session expired). A component on someone else’s site that asks for these can phish the site’s visitors, so it needs a person’s review: it is refused until then (rule credential-capture).
How to fix
Section titled “How to fix”Leave logins and payments to the site’s own pages or a payment provider’s checkout; a component collects only what a lead or a form needs.