Update to 1.9.9.3

2026-03-11 08:54:43 +00:00 · 2025-08-27 06:46:22 +03:00 · 2025-08-27 06:46:22 +03:00 · 9fbe0ebdea
commit 9fbe0ebdea
parent a1dc05ee74
34 changed files with 128 additions and 11 deletions
--- a/8
+++ b/8
@ -1,3 +1,11 @@
+1.9.9.3 (2025-08-27)
+=========================
+- Add protection against style changes for wrapper div elements [#2646]
+- Add protection against for sandboxed iframes [#2648]
+- Add protection against overlays [#2651]
+- Add protection against html, body and form opacity [#2653]
+- Add error message for untrusted iframes during fill [#2649]
+
 1.9.9.2 (2025-08-21)
 =========================
 - Fix parent element opacity check for better clickjacking attempt prevention [#2641]
--- a/README.md
+++ b/README.md
@ -1,15 +1,12 @@
 # KeePassXC-Browser

-Browser extension for [KeePassXC](https://keepassxc.org/) with [Native Messaging](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Native_messaging).
-
-Based on [pfn](https://github.com/pfn)'s [chromeIPass](https://github.com/pfn/passifox).
-Some changes merged also from [smorks](https://github.com/smorks)' [KeePassHttp-Connector](https://github.com/smorks/keepasshttp-connector).
+Browser extension for [KeePassXC](https://keepassxc.org/) with [native messaging](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Native_messaging).

 ## Download and use

 This browser extension was first supported in KeePassXC 2.3.0 (release end of 2017). In general it is advised to only use the latest available release.

-Get the extension for [Firefox](https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/) or [Chrome/Chromium](https://chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidjkkk) or [Microsoft Edge](https://microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo) (requires KeePassXC 2.5.3 or newer).
+Get the extension for [Firefox](https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/) or [Chrome/Chromium](https://chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidjkkk) or [Microsoft Edge](https://microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo).

 Please see this [document](https://keepassxc.org/docs/KeePassXC_GettingStarted.html#_browser_integration) for instructions how to configure KeePassXC in order to connect the database correctly.

--- a/dist/manifest_chromium.json
+++ b/dist/manifest_chromium.json
@ -1,8 +1,8 @@
 {
    "manifest_version": 3,
    "name": "KeePassXC-Browser",
-    "version": "1.9.9.2",
-    "version_name": "1.9.9.2",
+    "version": "1.9.9.3",
+    "version_name": "1.9.9.3",
    "minimum_chrome_version": "93",
    "description": "__MSG_extensionDescription__",
    "author": "KeePassXC Team",
--- a/dist/manifest_firefox.json
+++ b/dist/manifest_firefox.json
@ -1,7 +1,7 @@
 {
    "manifest_version": 2,
    "name": "KeePassXC-Browser",
-    "version": "1.9.9.2",
+    "version": "1.9.9.3",
    "description": "__MSG_extensionDescription__",
    "author": "KeePassXC Team",
    "icons": {
--- a/keepassxc-browser/_locales/bg/messages.json
+++ b/keepassxc-browser/_locales/bg/messages.json
@ -370,6 +370,10 @@
        "message": "Не са намерени данни за вход.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Попълването на регистрации е спряно в несигурна рамка.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Повече от една регистрация е намерена в KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/cs/messages.json
+++ b/keepassxc-browser/_locales/cs/messages.json
@ -370,6 +370,10 @@
        "message": "Chyba:\nNenalezena žádná uživatelská jména.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Chyba:\nV KeePassXC nalezeno více než jedno uživateské jméno!\nKliknutím na ikonu KeePassXC-Browser zobrazíte další možnosti.",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/da/messages.json
+++ b/keepassxc-browser/_locales/da/messages.json
@ -370,6 +370,10 @@
        "message": "Fandt ingen logins.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Fandt mere end ét login i KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/de/messages.json
+++ b/keepassxc-browser/_locales/de/messages.json
@ -370,6 +370,10 @@
        "message": "Keine Anmeldungen gefunden.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "In KeePassXC wurde mehr als eine Anmeldung gefunden!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/el/messages.json
+++ b/keepassxc-browser/_locales/el/messages.json
@ -370,6 +370,10 @@
        "message": "Δεν βρέθηκαν συνδέσεις.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Περισσότερες από μία συνδέσεις βρέθηκαν στο KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/en_GB/messages.json
+++ b/keepassxc-browser/_locales/en_GB/messages.json
@ -370,6 +370,10 @@
        "message": "No logins found.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "More than one login was found in KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/es/messages.json
+++ b/keepassxc-browser/_locales/es/messages.json
@ -370,6 +370,10 @@
        "message": "No se encontraron inicios de sesión.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "¡Se encontró más de un inicio de sesión en KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/fi/messages.json
+++ b/keepassxc-browser/_locales/fi/messages.json
@ -370,6 +370,10 @@
        "message": "Virhe:\nTunnuksia ei löydy.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Tietueiden täyttö estettiin epäluotettavaan iframe-upotukseen.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Virhe:\nKeePassXC löysi useampia tilitietoja!\nPaina selainlaajennuksen ikonia nähdäksesi lisävalinnat.",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/fr/messages.json
+++ b/keepassxc-browser/_locales/fr/messages.json
@ -370,6 +370,10 @@
        "message": "Aucun identifiant  n’a été trouvé.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "La saisie des identifiants a été bloquée par un cadre intégré non fiable",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Plus d’un identifiant a été trouvé dans KeePassXC",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/he/messages.json
+++ b/keepassxc-browser/_locales/he/messages.json
@ -370,6 +370,10 @@
        "message": "לא נמצאו התחברויות.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "נמצאה יותר מהתחברות אחת ל־KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/hu/messages.json
+++ b/keepassxc-browser/_locales/hu/messages.json
@ -370,6 +370,10 @@
        "message": "Hiba:\nNem találhatók bejelentkezések.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Hiba:\nTöbb mint egy bejelentkezés található a KeePassXC programban!\nNyomja meg a KeePassXC-böngésző ikont a több lehetőségért.",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/id/messages.json
+++ b/keepassxc-browser/_locales/id/messages.json
@ -370,6 +370,10 @@
        "message": "Login tidak ditemukan.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Lebih dari satu login ditemukan di KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/it/messages.json
+++ b/keepassxc-browser/_locales/it/messages.json
@ -370,6 +370,10 @@
        "message": "Errore:\nNessun accesso trovato.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "In KeePassXC è stato trovato più di un accesso!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/ja/messages.json
+++ b/keepassxc-browser/_locales/ja/messages.json
@ -370,6 +370,10 @@
        "message": "ログイン情報が見つかりません。",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "KeePassXC に複数のログイン情報が見つかりました！",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/ko/messages.json
+++ b/keepassxc-browser/_locales/ko/messages.json
@ -370,6 +370,10 @@
        "message": "오류:\n로그인을 찾을 수 없습니다.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "오류:\nKeePassXC에 하나 이상의 로그인 정보가 있습니다!\nKeePassXC-브라우저 아이콘을 눌러서 더 많은 옵션을 보십시오.",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/lt/messages.json
+++ b/keepassxc-browser/_locales/lt/messages.json
@ -370,6 +370,10 @@
        "message": "Nerasta jokių prisijungimų.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "KeePassXC buvo rastas daugiau nei vienas prisijungimas!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/nb/messages.json
+++ b/keepassxc-browser/_locales/nb/messages.json
@ -370,6 +370,10 @@
        "message": "Fant ingen pålogginger.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Mer enn én pålogging ble funnet i KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/nl/messages.json
+++ b/keepassxc-browser/_locales/nl/messages.json
@ -370,6 +370,10 @@
        "message": "Geen inloggegevens aangetroffen.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Invulling van de inloggegevens geblokkeerd in niet-vertrouwd iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Er zijn meerdere inloggegevens aangetroffen in KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/pl/messages.json
+++ b/keepassxc-browser/_locales/pl/messages.json
@ -370,6 +370,10 @@
        "message": "Nie znaleziono danych logowania.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Wypełnienie danych uwierzytelniających zablokowane w niezaufanej ramce iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Znaleziono więcej niż jedne dane logowania w KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/pt_BR/messages.json
+++ b/keepassxc-browser/_locales/pt_BR/messages.json
@ -370,6 +370,10 @@
        "message": "Nenhum login foi encontrado.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Mais de um login foi encontrado no KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/pt_PT/messages.json
+++ b/keepassxc-browser/_locales/pt_PT/messages.json
@ -370,6 +370,10 @@
        "message": "Não foram encontradas credenciais",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Existe mais do que uma credencial guardada no KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/ro/messages.json
+++ b/keepassxc-browser/_locales/ro/messages.json
@ -370,6 +370,10 @@
        "message": "Nu s-au găsit autentificări.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "În KeePassXC s-au găsit mai multe autentificări!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/ru/messages.json
+++ b/keepassxc-browser/_locales/ru/messages.json
@ -370,6 +370,10 @@
        "message": "Не найдены логины.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "В KeePassXC обнаружено более одного логина!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/sv/messages.json
+++ b/keepassxc-browser/_locales/sv/messages.json
@ -370,6 +370,10 @@
        "message": "Fel:\nInga inloggningar hittades.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Ifyllning av inloggningsuppgifter blockerad av otillförlitlig iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Fel:\nMer än en inloggning hittades i KeePassXC!\nTryck på ikonen för KeePassXC-Browser för fler alternativ.",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/tr/messages.json
+++ b/keepassxc-browser/_locales/tr/messages.json
@ -370,6 +370,10 @@
        "message": "Herhangi bir oturum açma bulunamadı.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "KeePassXC üzerinde birden fazla oturum açma bulundu!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/uk/messages.json
+++ b/keepassxc-browser/_locales/uk/messages.json
@ -370,6 +370,10 @@
        "message": "Не знайдено облікових даних.",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "Знайдено більше ніж один запис у KeePassXC!",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/zh_CN/messages.json
+++ b/keepassxc-browser/_locales/zh_CN/messages.json
@ -370,6 +370,10 @@
        "message": "未找到登录信息。",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "凭据填充在不可信 iframe 中被阻止。",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "在 KeePassXC 中找到多条登录信息！",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/keepassxc-browser/_locales/zh_TW/messages.json
+++ b/keepassxc-browser/_locales/zh_TW/messages.json
@ -370,6 +370,10 @@
        "message": "錯誤：\n找不到登錄資訊。",
        "description": "Shown when no credentials are found for the current page."
    },
+    "credentialsBlockedInIframe": {
+        "message": "Credential fill blocked in untrusted iframe.",
+        "description": "Alert message when filling credentials is blocked due to iframe restrictions."
+    },
    "credentialsMultipleFound": {
        "message": "錯誤：\n在 KeePassXC 中找到多個登錄資訊！\n點選 KeePassXC-Browser 圖示來檢視更多選項。",
        "description": "Alert message when trying to fill username and/or password when multiple credentials are found."
--- a/package-lock.json
+++ b/package-lock.json
@ -1,12 +1,12 @@
 {
  "name": "keepassxc-browser",
-  "version": "1.9.9.2",
+  "version": "1.9.9.3",
  "lockfileVersion": 2,
  "requires": true,
  "packages": {
    "": {
      "name": "keepassxc-browser",
-      "version": "1.9.9.2",
+      "version": "1.9.9.3",
      "license": "GPL-3.0",
      "dependencies": {
        "@npmcli/fs": "^2.1.0"
--- a/package.json
+++ b/package.json
@ -1,6 +1,6 @@
 {
  "name": "keepassxc-browser",
-  "version": "1.9.9.2",
+  "version": "1.9.9.3",
  "description": "KeePassXC-Browser",
  "main": "build.js",
  "devDependencies": {