r-zakarya 263799adcd fix(crypto): migrate trashed entries' usernames too (§1.3) ...

migrateUsernamesAtRest only swept state.entries (live rows), so a soft-deleted
entry kept its cleartext username in the DB until purge. Now it also fetches
+ decrypts the trash (GET /entries?deleted=1) and includes those rows in the
sweep. The PUT updates the row's fields without touching `deleted`, so the
entry stays in the trash; trashed rows aren't in the sync snapshot, so no
churn. Surfaced by a lingering cleartext username on a trashed test entry.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-09 05:15:34 +01:00

css

style: define missing --bg-elev-3 / --accent-fg CSS variables

2026-07-03 18:01:57 +01:00

delphi-backend

feat(crypto): encrypt username at rest (CODE_AUDIT §1.3)

2026-07-08 22:04:48 +01:00

js

fix(crypto): migrate trashed entries' usernames too (§1.3)

2026-07-09 05:15:34 +01:00

.gitattributes

feat: secure notes + password history + custom fields + quick-win bundle

2026-06-14 20:17:19 +01:00

.gitignore

refactor(js): extract TOTP module + add RFC 6238 tests (§3.1)

2026-07-05 16:35:29 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

feat(crypto): encrypt username at rest (CODE_AUDIT §1.3)

2026-07-08 22:04:48 +01:00

CODE_AUDIT.md

docs: mark username-at-rest encryption runtime-validated (§1.3)

2026-07-09 05:09:17 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index-legacy.html

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

refactor(js): extract quick-search overlay cluster from app.js (§3.1)

2026-07-08 18:43:55 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

1.2 MiB

Languages

JavaScript 51.8%

Pascal 30.5%

CSS 7.4%

HTML 6.3%

PHP 3.2%

Other 0.7%