When using Open and Fill from the Mac instead of a browser, URL encodings are lost (decoded)

mscottreed
mscottreed
Community Member
edited December 2023 in 1Password in the Browser

the website field is:
https://browser.neo4j.io?connectURL=neo4j+s://neo4j@XXXXXXXX.databases.neo4j.io
where XXXXXXXX is the actual instance and is elided for security
When I click on open and fill in any browser plugin (Chrome, or Firefox) the site opens correctly.
When I click Open and Fill in the mac it decodes the URL which neo4j no longer understands. Here is what appears in the browser URL bar after open and fill from the mac client:
https://browser.neo4j.io/?connectURL=neo4j+s://neo4j@XXXXXXXX.databases.neo4j.io&abcdefghijklmnopqrstuv=bcdefghijklmnopqrstuvw
I wasn't sure if the parameter it puts at the end held sensitive data so I also changed that

1Password Version: 1Password 7 Version 7.9.11
Extension Version: 70911001
OS Version: 14.1.1 (23B81)
Browser: native app

Comments

  • mscottreed
    mscottreed
    Community Member

    Uggh, the form has the same problem as the mac client, here is the first URL:
    https : // browser.neo4j.io ? connectURL = neo4j % 2 B s % 3 A % 2 F % 2 F neo4j % 4 0 XXXXXXXX.databases.neo4j.io

  • EvonG1P
    EvonG1P

    Hey @mscottreed, thanks for writing in. The behaviour you described when using the Open & Fill action from the 1Password app is a known issue our development team is aware of. I've added your case as an affected user for this specific website.

    When the Open & Fill action from the app is used, a random string of characters is added to the URL which acts as a sort of 'secret handshake' between 1Password and the website. This string doesn't contain any of your username/password data.

    Due to the security mechanisms in place on some websites, such as the one you've shared, the string of characters can cause an issue with the site and prevent it from re-directing properly.

    In the meantime, I recommend the following workaround:

    1. Open the 1Password desktop app.
    2. Locate the Login item, click the down arrow beside the website URL and click "Open".
    3. When the page loads, click the login item from the autofill menu under the field.

    I realize this may not be ideal, and I'm sorry for the extra steps involved.

    I hope that helps in the meantime, @mscottreed

    ref: dev/core/core#8723

This discussion has been closed.