Asking about the new tab focus and switching functionality

[Virgula0]

The new function recently introduced, which asks for password re-entry on encrypted reports whenever a different browser tab or window is focused, is very annoying. Is there a possibility of disabling or revert such a function at all?

[kac89]

Hi @Virgula0,

It was a difficult decision; I understand that people were used to being able to keep a report open for longer. The problem with that approach was that, in order to keep a report open for longer, the "security key" had to be stored somewhere. Previously, it was stored in sessionStorage until the tab was closed. (And this was reported as a security issue; even SAST flagged it.) Now, the "security key" is stored only in memory and is not saved/dump anywhere to make it more secure.

Currently, opening the page in a new window works correctly (only the auto-lock feature is enabled); you do not need to re-enter the security key, even if focus on window lost.

I'll try to add some configuration options in the settings so users can customize it to their needs.

Thanks for the message!

[kac89]

Change is in main branch. Test it, first go to settings and change "Key Storage Security Level" to "Legacy" and should works like before.

[Virgula0]

Change is in main branch. Test it, first go to settings and change "Key Storage Security Level" to "Legacy" and should works like before.

I din't see that option because I was using the online version not the locally hosted one. Anyway another idea could be to start to write the report in plaintext mode and then add an option to encrypt it after the report is completed. Also, using I3 and window tiling managers does not help with the focus functionalities and tab switching resulting to be even more painful than normal.

[kac89]

Hey, all changes in main branch are auto deployed on Vulnrepo.com just refresh page.

[Virgula0]

Hey, all changes in main branch are auto deployed on Vulnrepo.com just refresh page.

It seems to work thanks