Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SMS fields detected as individual TOTP fields #2315

Open
paveldvorak5 opened this issue Aug 18, 2024 · 3 comments
Open

SMS fields detected as individual TOTP fields #2315

paveldvorak5 opened this issue Aug 18, 2024 · 3 comments

Comments

@paveldvorak5
Copy link

Overview

The extension fills some fields that are not login fields

Steps to Reproduce

  1. Open a site that wants you to fill a SMS code like aukro.cz
  2. The SMS fields are filled by KeePass

Expected Behavior

No to change fields on the screenshot

Actual Behavior

See the image

Context

Possible solution: do no fill the fields bellow so minimal width or do no fill when too much input fields are found

KeePass Extension for Firefox - 1.9.2

image

@droidmonkey droidmonkey transferred this issue from keepassxreboot/keepassxc Aug 18, 2024
@droidmonkey droidmonkey transferred this issue from keepassxreboot/keepassxc-ci-docker Aug 18, 2024
@droidmonkey
Copy link
Member

droidmonkey commented Aug 18, 2024

Please post the HTML excerpt associated with these fields.

@droidmonkey droidmonkey changed the title Browser integraton fill improvement SMS fields detected as individual TOTP fields Aug 18, 2024
@paveldvorak5
Copy link
Author

<auk-verification-code-input _ngcontent-ng-c1813823941="" class="display-block m-b-2" _nghost-ng-c1575450318=""><input _ngcontent-ng-c1575450318="" autocomplete="one-time-code" class="m-r-2 m-l-2 ng-star-inserted" inputmode="numeric"><input _ngcontent-ng-c1575450318="" autocomplete="one-time-code" class="m-r-2 m-l-2 ng-star-inserted" inputmode="numeric"><input _ngcontent-ng-c1575450318="" autocomplete="one-time-code" class="m-r-2 m-l-2 ng-star-inserted" inputmode="numeric"><input _ngcontent-ng-c1575450318="" autocomplete="one-time-code" class="m-r-2 m-l-2 ng-star-inserted" inputmode="numeric"><!----></auk-verification-code-input>

whole page in the attachment
page.tar.gz

@e-t-l
Copy link

e-t-l commented Sep 8, 2024

The problem is that those are TOTP fields. It's just that the TOTP generator is a proprietary web server that sends you a text, not a local app like KeePassXC. I'm not a dev here but I don't know how the extension could ever differentiate TOTP fields where you receive a text versus one where you open an app, because the website front-ends are identical.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants