r-zakarya 3c1525e46f feat(android): end-to-end read path validated on device, add the container diagnostic ...

GET in 80 ms, decryption in 3893 ms, entries and trash counted, second call answers 304. try-open.js opens a container with Node so a failure can be attributed: a GCM tag that does not verify means wrong password OR altered file, and the app cannot tell which.

2026-08-15 00:31:01 +01:00

android-client

feat(android): end-to-end read path validated on device, add the container diagnostic

2026-08-15 00:31:01 +01:00

css

fix(list): keep the header gap constant when it sticks

2026-08-02 00:09:33 +01:00

delphi-backend

feat(backup): include the trash in exports and auto-backups

2026-08-07 15:04:41 +01:00

js

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

server-php

fix(sync-php): read Authorization via getallheaders and tolerate ETag forms

2026-08-14 17:58:48 +01:00

.gitattributes

feat: secure notes + password history + custom fields + quick-win bundle

2026-06-14 20:17:19 +01:00

.gitignore

chore: ignore the generated project resource too

2026-08-14 23:23:28 +01:00

AndroidManifest.template.xml

feat(android): HTTP client for the sync endpoint, with ETag reuse

2026-08-14 23:37:06 +01:00

api.php

Add CSP header and session rotation on login

2026-05-09 22:24:08 +01:00

CLAUDE.md

feat(backup): include the trash in exports and auto-backups

2026-08-07 15:04:41 +01:00

CODE_AUDIT.md

fix(kdf): neutralize the /migrate-kdf endpoint server-side (6c-1 / 6c-4)

2026-07-20 05:43:39 +01:00

icon-hex-16.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-hex.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-key.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-shield.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon-vault.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

icon.svg

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

index.html

feat(autofill): Ctrl+Shift+T types the 2FA code

2026-07-25 16:53:00 +01:00

mainApk.fmx

feat(android): crypto self-test harness on the new FMX project

2026-08-14 18:29:12 +01:00

mainApk.pas

fix(android): keep the ETag only when the decryption that followed succeeded

2026-08-15 00:06:30 +01:00

package.json

test: add frontend unit suite + fix mixed local/UTC timestamps

2026-07-04 19:17:33 +01:00

pmserverApk.deployproj

feat(android): end-to-end read path validated on device, add the container diagnostic

2026-08-15 00:31:01 +01:00

pmserverApk.dpr

feat(android): HTTP client for the sync endpoint, with ETag reuse

2026-08-14 23:37:06 +01:00

pmserverApk.dproj

fix(android): declare KeySpec so the native PBKDF2 call resolves, and report why it fails

2026-08-14 23:22:56 +01:00

security-issues.md

Mark resolved issues in security-issues.md

2026-05-09 22:29:09 +01:00

test_pbkdf2.php

feat: MFA tools, single-instance, tray polish, prefs persistence

2026-06-08 21:31:39 +01:00

TEST_PLAN.md

feat: PIN unlock + table column picker + edit-position chooser + UX

2026-06-29 04:41:39 +01:00

TEST_REGRESSION.md

feat: sticky slideover Save + uncategorised-view polish + regression plan

2026-07-01 13:04:45 +01:00

TEST_SCENARIOS.md

fix(import): count the trash when deduplicating by uuid

2026-08-07 17:35:40 +01:00

TEST_SYNC.md

feat: WebDAV sync + batch DnD + clean shutdown + center-modal UX bundle

2026-06-30 00:32:12 +01:00

S

Description

full local password manager

24 MiB

Languages

Pascal 46.7%

JavaScript 35.4%

HTML 9.4%

CSS 4.9%

PHP 2.1%

Other 1.4%