Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Item Data Fields Are No Longer Draggable From Browser Extension #12616

Closed
1 task done
bwbug opened this issue Dec 30, 2024 · 2 comments · Fixed by #12067
Closed
1 task done

Item Data Fields Are No Longer Draggable From Browser Extension #12616

bwbug opened this issue Dec 30, 2024 · 2 comments · Fixed by #12067
Labels
browser Browser Extension bug

Comments

@bwbug
Copy link

bwbug commented Dec 30, 2024

Steps To Reproduce

  1. Open "View Login" view (or any other item view).
  2. Hover mouse over field label for Username, Password, or any other field (except for custom linked fields).
  3. Click and drag to any valid drop target for HTML5 draggable items.

Expected Result

On hovering the mouse in Step 2 of the above instructions, the mouse cursor should change to a "Move" icon (four arrows arranged in a compass shape: ✥).

Upon release of the dragged item, the value of the dragged field should be transferred into the drop target.

Actual Result

Nothing happens. Item fields are no longer draggable.

Screenshots or Videos

No response

Additional Context

For versions 2022.10.0-2024.11.2, all fields in the browser extension (except custom linked fields) were draggable, thanks to PR 3321 by @patrickhlauke (and prior to 2022.10.0, at least the Username, Password and TOTP fields were draggable). The functionality was lost starting in version 2024.12.0, and has still not been restored (as of version 2024.12.4).

Draggable fields are essential for secure transfer of credentials (avoiding potential information leaks from the highly vulnerable system clipboard) for scenarios in which Bitwarden's autofill functionality cannot be used (e.g., autofill failures, or transferring of sensitive information to input fields outside the browser).

Therefore, fixing this bug is a high-priority security issue.

Operating System

Windows

Operating System Version

Windows 11 (23H2)

Web Browser

Microsoft Edge

Browser Version

No response

Build Version

Version: 2024.12.4; SDK: 'main (edee180)'

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
@bwbug bwbug added browser Browser Extension bug labels Dec 30, 2024
@bwbug bwbug changed the title Item Data Fields Are No Longer Draggable in Browser Extension Item Data Fields Are No Longer Draggable From Browser Extension Dec 30, 2024
@bitwarden-bot
Copy link

Thank you for reporting this issue! We've added this to our internal tracking system.
ID: PM-16520

@djsmith85 djsmith85 linked a pull request Dec 30, 2024 that will close this issue
@djsmith85
Copy link
Contributor

Hi @bwbug and thank you for the report.

This was also noticed internally and is addressed with #12067. The changes will be included in the next release (2025.1).

Closing this now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
browser Browser Extension bug
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants