Security concern: copying from Preferences UI copies Notes data

Chris Messina

To reproduce:

1. Create a New Item with Notes¹
2. Type some notes and save the item²
3. Open Preferences
4. Go to About section
5. Click on the build number (or any of the selectable text)³
6. Hit ⌘-a to select all the text, then ⌘-c to copy
7. Paste the text into a text editor
8. 😱

You'll notice that all of the Preference menu items are captured as well as the contents of the Notes field, and the last modified and created timestamps.

This is bad in the case where you go to copy the build information to report a bug to the 1Password forum and nearly paste your crypto wallet seed phrases into a public textbox!! 😰

1. 
2. 
3. 

---

1Password Version: 8.7.0
Extension Version: Not Provided
OS Version: macOS Monterey 12.3 (21E230)

MikeT

Hi @Chris Messina,

Thanks for reporting this. I can reproduce the issue, the copy all command didn't stop at the Settings modal, so it selected the content under it as well.

We'll get this fixed as soon as possible.

Chris Messina

Yep, that's what I assumed happened! Cheers!

PeterG_1P

Thanks for letting us know, @Chris Messina. We're happy to make the fix!