Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore non-connected databases from search with Browser Integration #1810

Merged

Conversation

varjolintu
Copy link
Member

@varjolintu varjolintu commented Apr 3, 2018

Ignores non-connected databases if search from all databases option is enabled in Browser Integration settings.

Description

Previously searching from all databases returned entries also from non-connected databases, which is not very secure. This change only searches from databases that are connected with the browser extension. KeePassXC-Browser side change is needed, although it can be merged beforehand.

Motivation and context

KeePassXC-Browser side PR here: keepassxreboot/keepassxc-browser#108.

How has this been tested?

Manually.

Types of changes

  • ✅ Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • ✅ I have read the CONTRIBUTING document. [REQUIRED]
  • ✅ My code follows the code style of this project. [REQUIRED]
  • ✅ All new and existing tests passed. [REQUIRED]
  • ✅ I have compiled and verified my code with -DWITH_ASAN=ON. [REQUIRED]
  • ✅ My change requires a change to the documentation and I have updated it accordingly.

@varjolintu varjolintu added this to the v2.4.0 milestone Apr 3, 2018
@varjolintu varjolintu changed the title Ignore non-connected databases from search Ignore non-connected databases from search with Browser Integration Apr 3, 2018
@droidmonkey
Copy link
Member

droidmonkey commented Apr 5, 2018

Rebase this onto 2.3.2 please. Although when you do that you will have to use the attributes instead of database custom data.

@varjolintu
Copy link
Member Author

I will make the needed modification to the custom data PR after this has been merged.

@varjolintu varjolintu changed the base branch from develop to release/2.3.2 April 5, 2018 06:59
@droidmonkey droidmonkey modified the milestones: v2.4.0, v2.3.2 Apr 6, 2018
Copy link
Member

@droidmonkey droidmonkey left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good work

@droidmonkey droidmonkey merged commit 658298b into keepassxreboot:release/2.3.2 May 4, 2018
@varjolintu varjolintu deleted the search_all_fix branch May 4, 2018 21:15
droidmonkey added a commit that referenced this pull request May 8, 2018
- Enable high entropy ASLR on Windows [#1747]
- Enhance favicon fetching [#1786]
- Fix crash on Windows due to autotype [#1691]
- Fix dark tray icon changing all icons [#1680]
- Fix --pw-stdin not using getPassword function [#1686]
- Fix placeholders being resolved in notes [#1907]
- Enable auto-type start delay to be configurable [#1908]
- Browser: Fix native messaging reply size [#1719]
- Browser: Increase maximum buffer size [#1720]
- Browser: Enhance usability and functionality [#1810, #1822, #1830, #1884, #1906]
- SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
- SSH Agent: Enhance usability and functionality [#1677, #1679, #1681, #1787]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants