Buriburizaemon/nodewarden
1
0
Fork 0
mirror of https://github.com/shuaiplus/nodewarden.git synced 2026-06-20 13:00:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: strip plaintext login helpers from cipher payload

Browse Source
This commit is contained in:
shuaiplus
2026-05-23 01:49:34 +08:00
parent 04ebfc7021
commit 56185ecb69
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
webapp/src/lib/api/vault.ts
+3
View File
@@ -841,6 +841,9 @@ async function buildCipherPayload(
cipher?.login && typeof cipher.login === 'object' cipher?.login && typeof cipher.login === 'object'
? { ...(cipher.login as Record<string, unknown>) } ? { ...(cipher.login as Record<string, unknown>) }
: {}; : {};
delete existingLogin.decUsername;
delete existingLogin.decPassword;
delete existingLogin.decTotp;
payload.login = { payload.login = {
...existingLogin, ...existingLogin,
username: await encryptTextValue(draft.loginUsername, keys.enc, keys.mac), username: await encryptTextValue(draft.loginUsername, keys.enc, keys.mac),