Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clipboard: Add option to block proxying of passwords #1894

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ferdnyc
Copy link
Member

@ferdnyc ferdnyc commented Nov 28, 2024

Since some password managers set a clipboard mimetype to signal when the clipboard contains password data, ignore the clipboard contents in those cases, to avoid exposing passwords over the link to the mobile device.

Fixes: #1893

TODO

  • Make it optional
  • Turn it off by default

Since some password managers set a clipboard mimetype to signal
when the clipboard contains password data, ignore the clipboard
contents in those cases, to avoid exposing passwords over the
link to the mobile device.

Fixes: GSConnect#1893
@ferdnyc ferdnyc added the security Encryption, Privacy or other data exposure label Nov 28, 2024
@daniellandau
Copy link
Member

As I wrote in the linked issue, I feel copying passwords is a valid use case and IMO it shouldn't be blocked by default.

@ferdnyc ferdnyc marked this pull request as draft December 1, 2024 18:56
@ferdnyc ferdnyc changed the title Clipboard: Block proxying of passwords Clipboard: Add option to block proxying of passwords Dec 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Encryption, Privacy or other data exposure
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Prevent Sending Passwords from the Clipboard
2 participants