tiago/Dashboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add HTTPS warning for vault and guard crypto availability

Browse Source
This commit is contained in:
Tiago
2025-11-29 21:04:27 -03:00
parent d3d89291a4
commit e06cb798c6
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
assets/app.js
View File

@@ -263,6 +263,17 @@ function hideModal(id) { const el = document.getElementById(id); el?.classList.a
function escapeHTML(s) { return (s ?? "").replace(/[&<>"]/g, c => ({"&":"&amp;","<":"&lt;",">":"&gt;","\"":"&quot;"}[c])); }
function escapeAttr(s) { return escapeHTML(s).replace(/'/g, "&#039;"); }
function formatDate(s) { try { const [y,m,d] = (s||"").split("-"); return d && m && y ? `${d}/${m}/${y}` : s; } catch { return s; } }
// WebCrypto guard (requer HTTPS/localhost)
const CRYPTO_REQUIRE_MSG = "O cofre precisa de HTTPS (ou localhost) porque o navegador bloqueia a criptografia em origens inseguras.";
let cryptoWarned = false;
function hasCrypto() { return !!(globalThis.crypto && globalThis.crypto.subtle); }
function ensureCrypto(msgTarget) {
if (hasCrypto()) return true;
if (msgTarget) msgTarget.textContent = CRYPTO_REQUIRE_MSG;
if (!cryptoWarned) { alert(CRYPTO_REQUIRE_MSG); cryptoWarned = true; }
return false;
}
// ------- Cofre de Senhas (WebCrypto) -------
async function refreshCreds() {
if (state.useApi) {
@@ -421,6 +432,7 @@ function b642ab(b64) {
}
async function deriveKey(password, saltB64, iterations) {
if (!hasCrypto()) throw new Error('crypto_unavailable');
const salt = b642ab(saltB64);
const keyMaterial = await crypto.subtle.importKey(
"raw", textEnc.encode(password), { name: "PBKDF2" }, false, ["deriveKey"]
@@ -456,6 +468,11 @@ function renderVaultGate() {
const status = $("#vaultStatus");
$("#vaultLocked").classList.remove("hidden");
$("#vaultUnlocked").classList.add("hidden");
if (!ensureCrypto(status)) {
setForm.classList.add("hidden");
unlockForm.classList.add("hidden");
return;
}
if (!meta) {
status.textContent = "Proteja suas senhas com uma senha mestra.";
setForm.classList.remove("hidden");
@@ -468,6 +485,7 @@ function renderVaultGate() {
}
async function unlockVault(password) {
if (!ensureCrypto($("#vaultStatus"))) return;
const meta = getVault();
if (!meta) throw new Error("Cofre não configurado");
const key = await deriveKey(password, meta.salt, meta.iterations || VAULT_ITERS);
@@ -805,6 +823,7 @@ document.addEventListener("DOMContentLoaded", async () => {
$("#setVaultForm").addEventListener("submit", async (ev) => {
ev.preventDefault();
if (!ensureCrypto($("#vaultStatus"))) return;
const p1 = $("#vaultPass1").value;
const p2 = $("#vaultPass2").value;
if (!p1 || p1 !== p2) { alert("Senhas não conferem."); return; }