From 512cb425b31ba3364cffd61de331fcf5473b5bc7 Mon Sep 17 00:00:00 2001 From: Chris Duncan Date: Thu, 3 Jul 2025 09:57:25 -0700 Subject: [PATCH] Zero out password if put throws. --- src/lib/workers/safe.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/src/lib/workers/safe.ts b/src/lib/workers/safe.ts index 4ade245..e30c2c0 100644 --- a/src/lib/workers/safe.ts +++ b/src/lib/workers/safe.ts @@ -88,6 +88,7 @@ export class Safe extends WorkerInterface { */ static async put (name: string, password: Uint8Array, data: any): Promise { if (this.#storage.getItem(name)) { + password.fill(0) throw new Error(ERR_MSG) } return this.overwrite(name, password, data) -- 2.47.3