streetwriters / notesnook

A fully open source & end-to-end encrypted note taking alternative to Evernote.
https://notesnook.com/
GNU General Public License v3.0
10.33k stars 636 forks source link

Why can I still download attachments in locked notes without entering a password? #4420

Open streetwriters[bot] opened 8 months ago

streetwriters[bot] commented 8 months ago

Step i do

  1. create a new note and upload an attachment and then lock the note with vault password
  2. open settings profile, attachment manager and go to the file that i uploaded before in locked notes and i can still download it without typing any password

is this intentionally from developer? i think when i upload attachment in locked notes, whenever i want to download it again (in attachment manager in this case), it should prompt me a vault password

Btw, thank you for this awesome notes app! I regularly use NN and can't wait v3 come with nested notebook

Device information: App version: 2.6.14-fbded93-desktop OS: Linux 64-bit Browser: Electron 25.9.8 Pro: true

thecodrr commented 2 months ago

Attachments are not locked in locked notes. This will be addressed soon.