From ebfe4f3887332e41022b5a1b3b4c1e5a88826bcb Mon Sep 17 00:00:00 2001 From: varjolintu Date: Tue, 28 Nov 2023 16:13:46 +0200 Subject: [PATCH] Passkeys: Use hostname instead of host --- keepassxc-browser/content/passkeys-utils.js | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/keepassxc-browser/content/passkeys-utils.js b/keepassxc-browser/content/passkeys-utils.js index b20b221..40cb044 100644 --- a/keepassxc-browser/content/passkeys-utils.js +++ b/keepassxc-browser/content/passkeys-utils.js @@ -46,9 +46,9 @@ kpxcPasskeysUtils.buildCredentialCreationOptions = function(pkOptions) { } if (!pkOptions.rp.id) { - pkOptions.rp.id = window.location.host; - pkOptions.rp.name = window.location.host; - } else if (!window.location.host.endsWith(pkOptions.rp.id)) { + pkOptions.rp.id = window.location.hostname; + pkOptions.rp.name = window.location.hostname; + } else if (!window.location.hostname.endsWith(pkOptions.rp.id)) { throw new DOMException('Site domain differs from RP ID', DOMException.SecurityError); } @@ -102,8 +102,8 @@ kpxcPasskeysUtils.buildCredentialRequestOptions = function(pkOptions) { checkErrors(pkOptions); if (!pkOptions.rpId) { - pkOptions.rpId = window.location.host; - } else if (!window.location.host.endsWith(pkOptions.rpId)) { + pkOptions.rpId = window.location.hostname; + } else if (!window.location.hostname.endsWith(pkOptions.rpId)) { throw new DOMException('Site domain differs from RP ID', DOMException.SecurityError); }