From da4a99a6ef93f36b991498e6daaacc7fc26400a9 Mon Sep 17 00:00:00 2001 From: Gregory Soutade Date: Tue, 5 Dec 2017 08:05:47 +0100 Subject: [PATCH 1/2] Scroll to page bottom when user adds a new password --- server/resources/gpass.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/server/resources/gpass.js b/server/resources/gpass.js index 0ebac4c..6d98d2c 100755 --- a/server/resources/gpass.js +++ b/server/resources/gpass.js @@ -761,6 +761,8 @@ function add_password() startClearTimer(); }); + window.scrollTo(0,document.body.scrollHeight); + return true; } From b216ec99285ec72cfaf7b05b781414f6163eedd1 Mon Sep 17 00:00:00 2001 From: Gregory Soutade Date: Tue, 5 Dec 2017 08:06:48 +0100 Subject: [PATCH 2/2] Add Privacy Policy information --- ChangeLog | 12 ++++++++ PrivacyPolicy.md | 47 ++++++++++++++++++++++++++++++ chrome_addon/lib/main.js | 4 +++ chrome_addon/manifest.json | 2 +- firefox_webextension/manifest.json | 2 +- 5 files changed, 65 insertions(+), 2 deletions(-) create mode 100644 PrivacyPolicy.md diff --git a/ChangeLog b/ChangeLog index 7ae6952..5bb1f1f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,15 @@ +**v0.8.1 :** + +Server + + * Scroll to page bottom when user adds a new password + +Addon + + * Add Privacy Policy information + +CLI + **v0.8 :** Server diff --git a/PrivacyPolicy.md b/PrivacyPolicy.md new file mode 100644 index 0000000..88ea16b --- /dev/null +++ b/PrivacyPolicy.md @@ -0,0 +1,47 @@ +gPass web browser extension Privacy Policy +------------------------------------------ + + +## Information we collect ## + +The gPass extension collect three information once invoked : + * Site address URL + * Login name + * Master key + + +## How we use information we collect ## + +Once collected, site address and login name are crypted by a derived version of your master key. +It's then sent to the server you configured in extension configuration page for comparison. + +This server has been set up by the user himself (recommended) or by a provider he trust in. + +The database that the server access to do comparisons only contains the crypted +version of your information. They are never decrypted in the server side. + +If a comparison match, the real password is sent back to your extension were +it's unencrypted using the same key. + +Finally, the application context is cleared and nothing is retained in memory +nor written anywhere. + + +## Accessing and updating your personal information ## + +As a user, you can add, edit and delete your crypted information through +the web interface of the configuration defined server. + +During these operations, no clear information is sent to the server. + + +## Information we share ## + +Nothing is shared with anyone. Nor on extension side nor on server side. + + +## Information security ## + +Information transmitted to the server are done through an HTTPS AJAX request. +Data are crypted using AES 256 CBC algorithm and the master key is prior +derived using PKBDF2 algorithm. diff --git a/chrome_addon/lib/main.js b/chrome_addon/lib/main.js index 7376114..a56d9cc 100644 --- a/chrome_addon/lib/main.js +++ b/chrome_addon/lib/main.js @@ -458,4 +458,8 @@ async function self_test() console.log("Self test OK !"); } +console.log("Welcome to gPass web extension v0.8.1 !"); +console.log("Privacy Policy can be found at http://indefero.soutade.fr/p/gpass/source/tree/master/PrivacyPolicy.md"); +console.log(""); + //self_test(); diff --git a/chrome_addon/manifest.json b/chrome_addon/manifest.json index 45f76bc..423c03c 100644 --- a/chrome_addon/manifest.json +++ b/chrome_addon/manifest.json @@ -3,7 +3,7 @@ "name": "gPass", "short_name": "gPass", - "version": "0.8", + "version": "0.8.1", "description": "gPass : global password manager", "icons" : {"16":"icons/gpass_icon_16.png", "32":"icons/gpass_icon_32.png", "64":"icons/gpass_icon_64.png", "128":"icons/gpass_icon_128.png"}, "author" : "Grégory Soutadé", diff --git a/firefox_webextension/manifest.json b/firefox_webextension/manifest.json index 95c7324..5d9401d 100644 --- a/firefox_webextension/manifest.json +++ b/firefox_webextension/manifest.json @@ -3,7 +3,7 @@ "name": "gPass", "short_name": "gPass", - "version": "0.8", + "version": "0.8.1", "description": "gPass : global password manager", "icons" : {"16":"icons/gpass_icon_16.png", "32":"icons/gpass_icon_32.png", "64":"icons/gpass_icon_64.png", "128":"icons/gpass_icon_128.png"}, "author" : "Grégory Soutadé",