kryptco / kr-u2f

DEPRECATED A Browser extension that lets you use your phone as a U2F/WebAuthN Authenticator for strong, unphishable 2FA.
https://krypt.co
125 stars 36 forks source link

Inject Iframes #25

Open Xilonz opened 5 years ago

Xilonz commented 5 years ago

Iframes aren't injected with the krypton javascript.

Use case: I use Bitwarden as password manager, and it uses an iframe (https://vault.bitwarden.com/u2f-connector.html?data=...) in their extension to load an page that triggers the u2f-key. Opening that iframe in a seperate window injects the javascript, and krypton works.