Option to bypass app lock in specific case #1010

Closed
opened 2025-11-26 22:36:42 -06:00 by GiteaMirror · 2 comments
Owner

Originally created by @mKoonrad on GitHub (May 14, 2020).

Originally assigned to: @mpbw2 on GitHub.

Describe the Bug

I found option how to bypass app lock to get credentials in specific case

Steps To Reproduce

  1. Open app with immediately lock time option (it's the easiest way to reproduce and see bug)
  2. Scroll to any list of entries (you should see 3 dots on the right)
  3. Click on 3 dots to see window with options like view, edit, copy username etc.
  4. Lock and unlock phone
  5. Options to copy username, password, OTP code etc work. This window is above app lock screen.

Expected Result

App should be locked. I should't see window to manage entry.

Actual Result

I can copy username, password, TOTP code, card number, CCV code or note of entry

Environment

  • Device: OnePlus 5T
  • Operating system: Android 9
  • Build Version: 2.3.1 (2257)
  • Is this a Beta release? No
Originally created by @mKoonrad on GitHub (May 14, 2020). Originally assigned to: @mpbw2 on GitHub. ## Describe the Bug I found option how to bypass app lock to get credentials in specific case ## Steps To Reproduce 1. Open app with immediately lock time option (it's the easiest way to reproduce and see bug) 2. Scroll to any list of entries (you should see 3 dots on the right) 3. Click on 3 dots to see window with options like view, edit, copy username etc. 4. Lock and unlock phone 5. Options to copy username, password, OTP code etc work. This window is above app lock screen. ## Expected Result App should be locked. I should't see window to manage entry. ## Actual Result I can copy username, password, TOTP code, card number, CCV code or note of entry ## Environment - Device: OnePlus 5T - Operating system: Android 9 - Build Version: 2.3.1 (2257) - Is this a Beta release? No
Author
Owner

@kspearrin commented on GitHub (May 15, 2020):

@mportune-bw didn't we address something similar to this in a recent fix that was mentioning iOS?

@kspearrin commented on GitHub (May 15, 2020): @mportune-bw didn't we address something similar to this in a recent fix that was mentioning iOS?
Author
Owner

@mpbw2 commented on GitHub (May 20, 2020):

Fixed in #857 and available in beta

@mpbw2 commented on GitHub (May 20, 2020): Fixed in #857 and available in beta
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#1010