Skip to content

Bookmarks stored in plaintext in IndexedDB #114

@lamat1111

Description

@lamat1111

Bookmarks store message snippets, sender names, and space names in plaintext in IndexedDB.

cachedPreview: {
  senderName: string;  // display name at bookmark time
  textSnippet: string;
  sourceName: string;  // "Space Name > #channel"
}

Already encrypted when synced to network, but plaintext locally.

Risk is LOW - requires IndexedDB access (XSS or physical).
Bookmarks are capped at 200 and loaded into memory anyway, so encryption cost would be minimal.

Should we encrypt locally for defense-in-depth, or acceptable as-is?

@CassOnMars

Metadata

Metadata

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions