nextcloud / passman-webextension

Webextension for the Passman Nextcloud app. Also offers browser extension & Android app.
https://passman.cc
GNU Affero General Public License v3.0
113 stars 43 forks source link

Accessing keys via search while locked #329

Open astroneer opened 2 years ago

astroneer commented 2 years ago
### Steps to reproduce 1. Have a Master Password set 2. Start browser 3. Unlock Passman 4. Wait for sync completed 5. Lock Passman 6. Click Passman icon and select search function 7. Just use the search function to find and access keys ### Expected behaviour If locked the search function must be disabled. ### Actual behaviour After an initial unlock (to get all keys from nextcloud into the passman-webextension) further locking still allows to access keys via search function. ### Configuration **Browser**: Firefox **Passman version**: 2.1.1
OS3DrNick commented 2 years ago

I can confirm this also happens in Chrome.

Pressing the Lock button does show the 'Unlock Screen', but when focus is changed to a webpage, then clicking the passman icon will show the 'default' buttons when a vault is open.

Extension icon does show the locked label, and autofill seems (not heavily tested) not to work. Searching does work.

hadran9 commented 2 years ago

Hello everyone, I've just started to using passman, and I'm in love with this tool but it seems that this issue still exists.

Is there anything new about this ?