fix: strip plaintext login helpers from cipher payload

2026-06-20 21:00:41 +00:00 · 2026-05-23 01:49:34 +08:00
parent 04ebfc7021
commit 56185ecb69
1 changed files with 3 additions and 0 deletions
@@ -841,6 +841,9 @@ async function buildCipherPayload(
      cipher?.login && typeof cipher.login === 'object'
        ? { ...(cipher.login as Record<string, unknown>) }
        : {};
+    delete existingLogin.decUsername;
+    delete existingLogin.decPassword;
+    delete existingLogin.decTotp;
    payload.login = {
      ...existingLogin,
      username: await encryptTextValue(draft.loginUsername, keys.enc, keys.mac),