From 56185ecb696c9ca53da7b12e6a251998ff523f83 Mon Sep 17 00:00:00 2001
From: shuaiplus <2327005759@qq.com>
Date: Sat, 23 May 2026 01:49:34 +0800
Subject: [PATCH] fix: strip plaintext login helpers from cipher payload

---
 webapp/src/lib/api/vault.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/webapp/src/lib/api/vault.ts b/webapp/src/lib/api/vault.ts
index aaaf4b7..15ff64e 100644
--- a/webapp/src/lib/api/vault.ts
+++ b/webapp/src/lib/api/vault.ts
@@ -841,6 +841,9 @@ async function buildCipherPayload(
       cipher?.login && typeof cipher.login === 'object'
         ? { ...(cipher.login as Record<string, unknown>) }
         : {};
+    delete existingLogin.decUsername;
+    delete existingLogin.decPassword;
+    delete existingLogin.decTotp;
     payload.login = {
       ...existingLogin,
       username: await encryptTextValue(draft.loginUsername, keys.enc, keys.mac),