Skip to content

Set additional Clipboard security flags on windows #7127

@thedewi

Description

@thedewi

Overview

Unlike KeePass 2.x, KeePassXC is not setting the "Clipboard Viewer Ignore" format when populating the clipboard, resulting in plaintext passwords being saved by clipboard history tools and similar.

Source code: https://github.com/dlech/KeePass2.x/blob/0defb69f48687de62a4dbfad3213387371a3e8be/KeePass/Util/ClipboardUtil.Windows.cs#L189-L194

Sorry this isn't a PR.

I possibly shouldn't have classed this as "Bug" - but it was surprising behaviour to me, and has left me with passwords in a database they shouldn't be in.

Steps to Reproduce

  1. Highlight an entry and press Ctrl-C.
  2. Open clipboard history tool (eg Ditto).

Expected Behavior

No password entry.

Actual Behavior

History has recorded password entry.

Context

KeePassXC - Version 2.6.6
Revision: 9c108b9

Qt 5.15.2
Debugging mode is disabled.

Operating system: Windows 10 Version 2009
CPU architecture: x86_64
Kernel: winnt 10.0.19043

Metadata

Metadata

Assignees

Projects

Status

Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions