Kunzisoft / KeePassDX

Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
https://www.keepassdx.com/
GNU General Public License v3.0
4.71k stars 276 forks source link

magikeyboard issue with bancaprogetto.it #1555

Closed AnthillSudoku closed 1 year ago

AnthillSudoku commented 1 year ago

Describe the bug

Login to my Banca Progetto account does not work with magikeyboard (and copy / paste)

To Reproduce

  1. enable MagiKeyboard
  2. disable "automatic action" (do not press enter after filling a field)
  3. open https://ihbnext.cedacri.it/home-banking-ng/public/login/?abi=05015&codiceProdotto=default&lang=it
  4. share to KeePassDX
  5. fill username and passord with the MagiKeyboard
  6. remove a character from the passord field (backslash)

A good way to find if the password field will be accepted is to remove a character. If the password will be completely erased, it means the field have been filled, but the system does not recognize it after pressing Login.

Expected behavior

Password field submitted with MagiKeyboard are recognized as valid

KeePassDX:

Android:

Additional context

the site does not allow copy and paste at all, even on desktop with extension Don't Fuck With Paste

Using KeePassXC desktop, I found that its MagiKeyboard works only with this custom autotype sequence: {USERNAME}{TAB}{PASSWORD}

No difference between Firefox or Brave

J-Jamet commented 1 year ago

It simply seems that a javascript code on the site is preventing the characters from being entered correctly, as if the letters are being replaced on the fly. You should report the problem directly to the associated service.