Comment 16 for bug 1349128

I see this is being treated as critical, but does that also mean it is being treated as a security issue? I found my password in plain text after applying the work around, and if that were a chat application that's a pretty serious security breach.