-
Notifications
You must be signed in to change notification settings - Fork 8
Description
Missing feature
When using the browser extension some pages with user administration, mailbox setup or other credential fields (e.g. the Synology Web Interface, but I also observed this on other pages) always get filled with the main login.
For example, when I was just updating the domain of a notification email address in the Synology interface the extension directly injected my NAS username and password as email-user and the connected password.
For that a feature where you can say "ignore fields for now", "do not fill" or a "manual fill mode" would be great.
I know that this is most likely because the pages in question re-use identifiers, and to get around that I would love to see some kind of manual options to stop the extension from filling the credentials fully automatically (e.g. once you are logged in already).
Justification
- accidential credential leak (if you are not careful, change some other setting and overlook that the extension filled in your user credentials)
- leak "on purpose" as you may need to paste your password somewhere while you disable the extension temporarily
- temporary disabling in the browser removes the pinned icon, so you need to dig to your extensions to re-activate it (inconvinience)
Workarounds
Disconnecting device and then disabling the extension temporarily
Happy to help fleshing out this feature - and maybe even help implementing once I found the sources of the extensions (did not dig for them yet)