Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TOTP URI / QR Code gets broken if entry label includes colon #11731

Open
1 task done
strautvetter opened this issue Feb 4, 2025 · 0 comments
Open
1 task done

TOTP URI / QR Code gets broken if entry label includes colon #11731

strautvetter opened this issue Feb 4, 2025 · 0 comments

Comments

@strautvetter
Copy link

Have you searched for an existing issue?

  • Yes, I tried searching and reviewed the pinned issues

Brief Summary

According to the otpauth uri format spec the label must not contain a colon, either raw or url encoded. When generating an otpauth uri, keepassxc uses the url encoded entry label as otpauth label, which causes at least some authenticators / parsers to fail parsing.

Steps to Reproduce

  1. Create as password entry containing a colon in its label (for example a website url include http://)
  2. add TOTP settings
  3. get otpauth uri via QR code or secret service integration

Expected Versus Actual Behavior

Colons should probably be sanitized from the label to produce a working uri

KeePassXC Debug Information


Operating System

Linux

Linux Desktop Environment

KDE

Linux Windowing System

X11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: To triage
Development

No branches or pull requests

2 participants