-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
2.5.1 - Browser Confirm Access ignores subdomain specificity #3848
Description
I tested this behavior with the KeePassXC-Browser Addon for Firefox and Chrome. Downgrading KeepassXC from 2.5.1 to 2.5.0 fixed the issue, so it seems to be related to the latest version of KeepassXC and not to the browser addon.
Expected Behavior
When browsing to a site, the "KeePassXC-Browser Confirm Access" pop-up requests password access to the credentials stored for this specific site or does not pop-up at all for sites, for which I already granted password access.
Current Behavior
The pop-up requests access to multiple, unrelated sites.
Also, on sites that were already known and that never showed the pop-up after I ticked "Remember this decision", the pop-up requests access to other sites now.
Steps to Reproduce
- Upgrade KeepassXC to 2.5.1
- Browse to a site, which requests passwords stored in KeepassXC
Context
Tested on two different Windows desktops, one using Firefox + KeepassXC Browser, the other using Chrome + KeepassXC Browser
Debug Info
KeePassXC - Version 2.5.1
Revision: 0fd8836
Qt 5.13.1
Debugging mode is disabled.
Operating system: Windows 10 (10.0)
CPU architecture: x86_64
Kernel: winnt 10.0.18362
Enabled extensions:
- Auto-Type
- Browser Integration
- SSH Agent
- KeeShare (signed and unsigned sharing)
- YubiKey
Cryptographic libraries:
libgcrypt 1.8.5