Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cloaking feature reveals all secrets when loading a file #106

Open
FlooferLand opened this issue Feb 9, 2024 · 2 comments
Open

Cloaking feature reveals all secrets when loading a file #106

FlooferLand opened this issue Feb 9, 2024 · 2 comments

Comments

@FlooferLand
Copy link

FlooferLand commented Feb 9, 2024

Not sure if something broke with my configuration, but this ruins the point of a cloaking feature, and I would recommend removing it if it can't be solved as it could give users a false sense of security.

gif (dont worry that Discord token isn't real)
You can barely see it in the GIF because of the low framerate, but it's WAY more noticeable in a video.
If someone is livestreaming on a platform like Twitch, someone could easily clip and pause the video, being able to write down that secret.

It happens when switching between tabs, as well as loading a new file.
It always happens; takes about 200 ms for the secrets to get cloaked. Plenty of time for them to get snatched

@motdotla
Copy link
Member

unfortunately, so far, this appears to be a vscode limitation. i haven't been able to find a way around it. anyone have any ideas?

@ksmithut
Copy link

This also happens when you alt or option + click on a file, which opens the file in a new tab group. When it opens in the new tab group, it's not focused, but all the environment variables are completely visible.
Kapture 2024-02-13 at 11 28 00

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants