search

clarkio / azure-mask

A browser extension (Chromium, Firefox) that toggles concealment of sensitive information found in the Azure Portal web page such as Subscription Id's
MIT License
273 stars 60 forks source link

Cost Management reveals personal contact and address information #28

Open peterblazejewicz opened 6 years ago

peterblazejewicz commented 6 years ago

Hey, Should personal sensitive information (email, contact phone, address, etc) be visible in plain text or should be masked by extension? The info appears in this blade: > Cost Management + Billing - Contact info/ > Cost Management + Billing - Billing address

Thanks!

clarkio commented 6 years ago

@peterblazejewicz thank you for sharing another issue you've found. Right now the extension is looking specifically for text that's an email or "like" a subscription ID (check out the regex here: https://github.com/clarkio/azure-mask/blob/master/src/content-script/mask-process.js#L3). We will look into expanding upon that to include phone and address.

You mentioned email is still visible which I would expect to be covered by this extension. We'll dig into that in this particular area of the portal and figure out what's going on.