Extension allows me to save items with frozen account

CharDSon
CharDSon
Community Member
in 1Password in the Browser

The 1Password extension allows me to save items to my frozen account. I have tested it in Mozilla Firefox and Google Chrome from Fedora Workstation 37 and Windows 10.

The steps to reproduce it are:

  1. Have the 1Password extension in the browser blocked.

  2. Go to a site that supports login, e.g.: https://languagetool.org/user-login

  3. Unlock the 1Password extension.

  4. Enter your login credentials.

  5. Click on the button that displays the 1Password extension.

This does not work, if you enter the site with the extension unlocked.

1Password Version: 8.9.4
Extension Version: 2.5.1
OS Version: Fedora Workstation 37
Browser:_ Mozilla Firefox

Comments

  • ag_michaelc
    ag_michaelc

    Hey, @CharDSon. Thanks for pointing out this particular problematic workflow where saving is still allowed when it shouldn't be. I've filed an issue internally so the team can look into fixing this one up. 🙂

    ref: dev/core/core#19994

This discussion has been closed.