search

MaxLaumeister / PageCrypt

Client-side password-protection for HTML
https://pagecrypt.maxlaumeister.com/
MIT License
513 stars 102 forks source link

Inspect Doesn't work post encryption #32

Open ChintzRuparel opened 2 years ago

ChintzRuparel commented 2 years ago

Hey!

I used page crypt to send a sensitive page over to my dev friend. But after entering the password he cant inspect element the page and fetch the code. Is this a real world scenario? Like was this done on purpose?

Do lemme know!

Thanks and Regards, @ChintzRuparel

MaxLaumeister commented 2 years ago

Hi Chintz,

After entering the password, there's nothing to prevent someone from using inspect element to view the decrypted page's HTML elements. The decrypted page resides inside of an iframe; the iframe is embedded in the outer page (the PageCrypt tool).

I wonder if your friend might have used the View Source or Network tool instead, which shows the HTML as it was originally transmitted over the wire, encrypted and wrapped by the PageCrypt tool.