- Potential PII detected — not yet configured:
+ Potential PPI detected — not yet configured:
${items}
@@ -1899,7 +1253,7 @@
${settings.autoRedactDetected !== false ? 'Auto-redacted with standard placeholders.' : 'These were sent as-is.'}
${settings.autoAddDetected !== false ? ' Click + to add a permanent mapping.' : ''}
- `);
+ `;
preSendWarningEl.classList.add('visible');
@@ -1908,33 +1262,35 @@
preSendWarningEl.classList.remove('visible');
});
- // Auto-add buttons (+)
+ // Auto-add buttons
preSendWarningEl.querySelectorAll('.ss-ps-add').forEach(btn => {
btn.addEventListener('click', async () => {
const real = decodeURIComponent(btn.dataset.real);
const fake = decodeURIComponent(btn.dataset.fake);
const cat = btn.dataset.cat || 'general';
- // Add to local mappings array (used by the fetch interceptor)
- const newMapping = {
+ // Add to mappings via storage
+ const result = await getStorageData('ss_mappings');
+ const currentMappings = result || [];
+ currentMappings.push({
id: crypto.randomUUID(),
real, substitute: fake,
category: cat,
caseSensitive: false,
enabled: true,
createdAt: Date.now(),
- };
- mappings.push(newMapping);
+ });
+ await setStorageData('ss_mappings', currentMappings);
- // Persist via storage bridge (handles encryption transparently)
- setStorageData('ss_mappings', mappings);
+ // Update local mappings so the fetch interceptor uses them immediately
+ mappings = currentMappings;
- // Replace the PII value in the current input right now
+ // Replace the PPI value in the current input right now
if (inputEl) {
replaceInInput(inputEl, real, fake);
- // Re-scan — will dismiss warning if no more PII remains
+ // Re-scan — will dismiss warning if no more PPI remains
if (inputScanTimer) clearTimeout(inputScanTimer);
- inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150);
+ inputScanTimer = setTimeout(() => scanInputForPPI(inputEl), 150);
}
// Visual feedback
@@ -1943,24 +1299,6 @@
btn.disabled = true;
});
});
-
- // Ignore buttons
- preSendWarningEl.querySelectorAll('.ss-ps-ignore').forEach(btn => {
- btn.addEventListener('click', () => {
- const value = decodeURIComponent(btn.dataset.value);
- addIgnoredValue(value);
-
- // Remove this item's row
- const row = btn.closest('.ss-ps-item');
- if (row) row.remove();
-
- // Re-scan to update warning
- if (inputEl) {
- if (inputScanTimer) clearTimeout(inputScanTimer);
- inputScanTimer = setTimeout(() => scanInputForPII(inputEl), 150);
- }
- });
- });
}
// Replace all occurrences of `real` with `fake` in an input or contenteditable element
@@ -2008,14 +1346,14 @@
// Scan input on type and paste
let inputScanTimer = null;
- function scanInputForPII(target) {
+ function scanInputForPPI(target) {
const text = target.textContent || target.value || '';
if (!text || text.length < 5) {
if (preSendWarningEl) preSendWarningEl.classList.remove('visible');
return;
}
- const warnings = autoDetectPII(text, identity);
+ const warnings = autoDetectPPI(text, identity);
if (warnings.length > 0) {
showPreSendWarning(warnings, target);
} else if (preSendWarningEl) {
@@ -2029,7 +1367,7 @@
if (target.matches?.('[contenteditable], textarea, input[type="text"]')) {
// Debounce — don't scan on every keystroke
if (inputScanTimer) clearTimeout(inputScanTimer);
- inputScanTimer = setTimeout(() => scanInputForPII(target), 800);
+ inputScanTimer = setTimeout(() => scanInputForPPI(target), 800);
}
}, true);
@@ -2039,7 +1377,7 @@
if (target.matches?.('[contenteditable], textarea, input[type="text"]') ||
target.closest?.('[contenteditable]')) {
// Scan shortly after paste completes
- setTimeout(() => scanInputForPII(target.closest?.('[contenteditable]') || target), 200);
+ setTimeout(() => scanInputForPPI(target.closest?.('[contenteditable]') || target), 200);
}
}, true);
diff --git a/src/content/injector.js b/src/content/injector.js
index 9574bdc..7bf78c4 100644
--- a/src/content/injector.js
+++ b/src/content/injector.js
@@ -57,57 +57,22 @@
// Load mappings and settings, then inject into page
async function init() {
- let mappings, identity, settings;
-
const result = await api.storage.local.get(['ss_mappings', 'ss_identity', 'ss_settings']);
- const isEncrypted = result.ss_mappings?._ssLocalEncrypted ||
- result.ss_identity?._ssLocalEncrypted;
+ const settings = result.ss_settings || { enabled: true };
- if (isEncrypted) {
- // Data is encrypted — ask the background script for decrypted config.
- // The background has access to the Storage module which can decrypt.
- try {
- const response = await api.runtime.sendMessage({ type: 'get:decrypted-config' });
- if (response?.mappings) {
- mappings = response.mappings;
- identity = response.identity || {};
- settings = response.settings || { enabled: true };
- } else {
- // Background couldn't decrypt (locked) — inject with empty config
- // and wait for vault:unlocked message later
- mappings = [];
- identity = {};
- settings = result.ss_settings || { enabled: true };
- }
- } catch {
- mappings = [];
- identity = {};
- settings = result.ss_settings || { enabled: true };
- }
- } else {
- // Data is plaintext — read directly
- mappings = result.ss_mappings || [];
- const identityData = result.ss_identity || {};
- identity = mergeProfiles(identityData);
- settings = result.ss_settings || { enabled: true };
- }
+ // Check if data is encrypted (locked) — pass empty config
+ // The background will send decrypted data via vault:unlocked when ready
+ const isLocked = result.ss_mappings?._ssLocalEncrypted ||
+ result.ss_identity?._ssLocalEncrypted;
+ const mappings = isLocked ? [] : (result.ss_mappings || []);
+ const identityData = isLocked ? {} : (result.ss_identity || {});
- // Ensure identity is merged if it came from background
- if (identity.profiles) {
- identity = mergeProfiles(identity);
- }
-
- // Inject config as a global variable before loading content.js
- // Using a separate inline-data element ensures content.js can read it
- // even if there's a race condition with script.onload removal
- const configEl = document.createElement('script');
- configEl.type = 'application/json';
- configEl.id = 'ss-config-data';
- configEl.textContent = JSON.stringify({ mappings, identity, settings });
- (document.head || document.documentElement).appendChild(configEl);
+ // Merge active profiles into a flat identity object for the content script
+ const identity = mergeProfiles(identityData);
// Inject the main interception script into the page's world
const script = document.createElement('script');
+ script.setAttribute('data-ss-config', JSON.stringify({ mappings, identity, settings }));
script.src = api.runtime.getURL('src/content/content.js');
(document.head || document.documentElement).appendChild(script);
script.onload = () => script.remove();
diff --git a/src/lib/auto-detect.js b/src/lib/auto-detect.js
index 6555eec..9d3e18c 100644
--- a/src/lib/auto-detect.js
+++ b/src/lib/auto-detect.js
@@ -1,14 +1,14 @@
/**
* Silent Send - Auto-Detect
*
- * Scans text for potential PII that the user hasn't configured.
- * This catches things the identity and auto-redact scanner can't —
+ * Scans text for potential PPI that the user hasn't configured.
+ * This catches things the identity and secret scanner can't —
* because the user forgot or didn't know to configure them.
*
* Returns warnings (not auto-redactions) so the user can decide.
*/
-const PII_PATTERNS = [
+const PPI_PATTERNS = [
// --- Network ---
{
name: 'Private IP Address',
@@ -21,7 +21,7 @@ const PII_PATTERNS = [
regex: /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\b/g,
category: 'network',
hint: 'IP address — could identify your network',
- // Exclude common non-PII IPs
+ // Exclude common non-PPI IPs
exclude: /^(?:127\.0\.0\.1|0\.0\.0\.0|255\.255\.255\.\d+|8\.8\.[84]\.[84]|1\.1\.1\.1|1\.0\.0\.1)$/,
},
{
@@ -126,12 +126,12 @@ const PII_PATTERNS = [
},
];
-// Context words that make ambiguous patterns more likely to be PII
+// Context words that make ambiguous patterns more likely to be PPI
const CONTEXT_WORDS = /\b(?:born|birthday|dob|birth|passport|license|driver|ssn|social\s*security|address|home|live|lives|reside|zip|postal)\b/i;
const AutoDetect = {
/**
- * Scan text for potential unconfigured PII.
+ * Scan text for potential unconfigured PPI.
* Pass in identity so we can skip values the user already configured.
*
* Returns array of { name, value, hint, category, index }
@@ -167,7 +167,7 @@ const AutoDetect = {
}
}
- for (const pattern of PII_PATTERNS) {
+ for (const pattern of PPI_PATTERNS) {
// Skip context-dependent patterns if no context words present
if (pattern.contextRequired && !hasContext) continue;
@@ -221,15 +221,16 @@ const AutoDetect = {
*/
_detectProperNouns(text, configured) {
const findings = [];
- // Only match TWO OR MORE consecutive capitalized words
- // Single capitalized words cause too many false positives (sentence starts)
- const re = /\b([A-Z][a-z]{2,}(?:\s+[A-Z][a-z]{2,})+)\b/g;
+ const re = /(?:^|[.!?\n]\s*)?([A-Z][a-z]{2,}(?:\s+[A-Z][a-z]{2,})*)/g;
let m;
while ((m = re.exec(text)) !== null) {
const fullMatch = m[1];
if (!fullMatch) continue;
+ const before = text.slice(Math.max(0, m.index - 2), m.index);
+ const isSentenceStart = m.index === 0 || /[.!?\n]\s*$/.test(before);
+
const words = fullMatch.split(/\s+/);
const properWords = words.filter(w =>
w.length >= 3 &&
@@ -237,14 +238,15 @@ const AutoDetect = {
!configured.has(w.toLowerCase())
);
- if (properWords.length < 2) continue; // need at least 2 proper words
+ if (properWords.length === 0) continue;
+ if (isSentenceStart && properWords.length === 1 && words.length === 1) continue;
const value = properWords.join(' ');
- if (value.length >= 5 && !configured.has(value.toLowerCase())) {
+ if (value.length >= 3 && !configured.has(value.toLowerCase())) {
findings.push({
name: 'Possible Name/Org',
value,
- hint: 'Capitalized phrase — could be a name, company, or project',
+ hint: 'Capitalized word — could be a name, company, or project',
category: 'name',
});
}
@@ -260,8 +262,6 @@ const AutoDetect = {
};
// Common English words to exclude from proper noun detection
-// Comprehensive list including verbs, nouns, adjectives that appear
-// in titles, headings, UI buttons, and instructions
const COMMON_WORDS = new Set([
'the', 'and', 'but', 'for', 'not', 'you', 'all', 'can', 'had', 'her',
'was', 'one', 'our', 'out', 'are', 'has', 'his', 'how', 'its', 'may',
@@ -281,84 +281,6 @@ const COMMON_WORDS = new Set([
'number', 'other', 'point', 'right', 'small', 'state', 'thing',
'think', 'those', 'three', 'through', 'under', 'until', 'water',
'world', 'write', 'might', 'should', 'because', 'although',
- // Common verbs (titles, headings, buttons, instructions)
- 'generate', 'design', 'manage', 'process', 'handle', 'check', 'verify',
- 'submit', 'apply', 'accept', 'reject', 'approve', 'deny', 'confirm',
- 'cancel', 'delete', 'remove', 'edit', 'modify', 'view', 'display',
- 'search', 'filter', 'sort', 'select', 'choose', 'pick', 'enter',
- 'upload', 'download', 'install', 'enable', 'disable', 'activate',
- 'connect', 'disconnect', 'sync', 'refresh', 'reload', 'reset',
- 'save', 'load', 'store', 'restore', 'backup', 'copy', 'paste',
- 'lock', 'unlock', 'encrypt', 'decrypt', 'sign', 'register', 'login',
- 'logout', 'subscribe', 'share', 'publish', 'deploy', 'launch',
- 'merge', 'split', 'join', 'link', 'attach', 'insert', 'append',
- 'format', 'parse', 'convert', 'transform', 'translate', 'compile',
- 'execute', 'render', 'animate', 'validate', 'sanitize', 'escape',
- 'create', 'build', 'start', 'stop', 'open', 'close', 'run', 'send',
- // Common nouns (titles, headings, labels)
- 'account', 'action', 'address', 'alert', 'analysis', 'application',
- 'area', 'article', 'asset', 'background', 'badge', 'banner', 'board',
- 'body', 'border', 'bottom', 'box', 'browser', 'buffer', 'button',
- 'cache', 'calendar', 'card', 'category', 'center', 'channel', 'chart',
- 'chat', 'child', 'choice', 'client', 'cloud', 'code', 'collection',
- 'color', 'column', 'command', 'comment', 'community', 'company',
- 'component', 'config', 'configuration', 'connection', 'console',
- 'contact', 'container', 'content', 'context', 'control', 'count',
- 'country', 'custom', 'dashboard', 'data', 'database', 'date', 'day',
- 'default', 'description', 'design', 'desktop', 'detail', 'device',
- 'dialog', 'directory', 'document', 'domain', 'draft', 'driver',
- 'edge', 'editor', 'element', 'email', 'engine', 'entry', 'environment',
- 'error', 'event', 'example', 'extension', 'feature', 'feedback',
- 'field', 'file', 'filter', 'folder', 'font', 'footer', 'form',
- 'frame', 'function', 'gallery', 'general', 'global', 'grid',
- 'guide', 'handler', 'header', 'health', 'help', 'history', 'home',
- 'host', 'icon', 'image', 'index', 'info', 'input', 'instance',
- 'interface', 'issue', 'item', 'job', 'key', 'label', 'language',
- 'layout', 'level', 'library', 'light', 'limit', 'line', 'link',
- 'list', 'local', 'location', 'log', 'logo', 'main', 'manager',
- 'manual', 'map', 'media', 'member', 'memory', 'menu', 'message',
- 'method', 'mobile', 'modal', 'mode', 'model', 'module', 'monitor',
- 'navigation', 'network', 'node', 'note', 'notification', 'object',
- 'option', 'order', 'origin', 'output', 'overlay', 'overview', 'owner',
- 'package', 'page', 'panel', 'parent', 'parser', 'password', 'path',
- 'pattern', 'permission', 'photo', 'pipeline', 'placeholder', 'plan',
- 'platform', 'player', 'plugin', 'point', 'policy', 'pool', 'popup',
- 'port', 'position', 'post', 'power', 'preview', 'primary', 'print',
- 'priority', 'process', 'product', 'profile', 'program', 'progress',
- 'project', 'prompt', 'property', 'protocol', 'provider', 'proxy',
- 'public', 'query', 'queue', 'quick', 'range', 'rate', 'reader',
- 'record', 'region', 'release', 'remote', 'report', 'request',
- 'resource', 'response', 'result', 'review', 'role', 'root', 'route',
- 'row', 'rule', 'runtime', 'sample', 'scanner', 'schema', 'scope',
- 'screen', 'script', 'search', 'section', 'security', 'select',
- 'sender', 'server', 'service', 'session', 'setting', 'settings',
- 'setup', 'share', 'shell', 'shortcut', 'sidebar', 'signal', 'simple',
- 'single', 'site', 'size', 'slider', 'snapshot', 'socket', 'solution',
- 'source', 'space', 'stage', 'standard', 'status', 'step', 'storage',
- 'stream', 'string', 'style', 'subject', 'success', 'summary',
- 'support', 'switch', 'symbol', 'syntax', 'system', 'table', 'target',
- 'task', 'team', 'template', 'terminal', 'test', 'text', 'theme',
- 'thread', 'title', 'token', 'tool', 'toolbar', 'tooltip', 'total',
- 'track', 'traffic', 'tree', 'trigger', 'type', 'unit', 'update',
- 'upload', 'user', 'utility', 'value', 'variable', 'version', 'video',
- 'view', 'virtual', 'warning', 'watch', 'web', 'widget', 'width',
- 'window', 'wizard', 'word', 'worker', 'workspace', 'wrapper', 'zone',
- // Common adjectives
- 'active', 'advanced', 'available', 'basic', 'clean', 'clear', 'complete',
- 'connected', 'correct', 'critical', 'current', 'dark', 'deep',
- 'different', 'direct', 'double', 'dynamic', 'easy', 'empty', 'entire',
- 'exact', 'extra', 'fast', 'final', 'fixed', 'flat', 'free', 'fresh',
- 'full', 'generic', 'given', 'hidden', 'initial', 'inner', 'internal',
- 'invalid', 'latest', 'live', 'major', 'maximum', 'minimum', 'minor',
- 'mixed', 'modern', 'multiple', 'native', 'natural', 'nested', 'normal',
- 'online', 'optional', 'outer', 'overall', 'partial', 'pending', 'plain',
- 'popular', 'possible', 'previous', 'private', 'proper', 'protected',
- 'random', 'raw', 'ready', 'real', 'recent', 'related', 'relative',
- 'required', 'responsive', 'safe', 'secure', 'selected', 'sensitive',
- 'separate', 'shared', 'silent', 'similar', 'smart', 'smooth', 'solid',
- 'special', 'specific', 'stable', 'static', 'strict', 'strong',
- 'supported', 'unique', 'universal', 'unknown', 'upper', 'valid',
- 'various', 'visible', 'visual', 'whole', 'wide',
// Programming / tech terms
'string', 'number', 'boolean', 'object', 'array', 'function', 'class',
'type', 'error', 'null', 'undefined', 'true', 'false', 'return',
diff --git a/src/lib/org-policy.js b/src/lib/org-policy.js
index ce50bea..a4efa70 100644
--- a/src/lib/org-policy.js
+++ b/src/lib/org-policy.js
@@ -12,7 +12,7 @@
* - Policy updates are applied automatically
*
* Privacy: the org admin can check compliance (are required fields
- * configured?) but CANNOT see individual PII values.
+ * configured?) but CANNOT see individual PPI values.
*/
import api from './browser-polyfill.js';
@@ -198,11 +198,11 @@ const OrgPolicy = {
},
/**
- * Get org-required auto-redact patterns.
+ * Get org-required secret scanner patterns.
*
- * @returns {Array} additional patterns to add to auto-redact
+ * @returns {Array} additional patterns to add to the secret scanner
*/
- async getOrgRedactPatterns() {
+ async getOrgSecretPatterns() {
const policy = await this.getPolicy();
if (!policy?.requiredSecretPatterns?.length) return [];
@@ -220,7 +220,7 @@ const OrgPolicy = {
/**
* Check if the user's configuration meets org policy requirements.
- * Returns compliance status WITHOUT revealing actual PII values.
+ * Returns compliance status WITHOUT revealing actual PPI values.
*
* @returns {{ compliant: boolean, missing: string[], configured: string[] }}
*/
diff --git a/src/lib/auto-redact.js b/src/lib/secret-scanner.js
similarity index 82%
rename from src/lib/auto-redact.js
rename to src/lib/secret-scanner.js
index 125c703..89758f0 100644
--- a/src/lib/auto-redact.js
+++ b/src/lib/secret-scanner.js
@@ -1,13 +1,11 @@
/**
- * Silent Send - Auto Redact
+ * Silent Send - Secret Scanner
*
* Detects common secret/credential patterns in text and either
* warns or auto-redacts them. This catches things the identity-based
* smart patterns can't: API keys, tokens, passwords, SSNs, credit
* cards, private keys, connection strings, etc.
*
- * Supports user-defined custom patterns for proprietary token formats.
- *
* Each pattern has:
* - name: human-readable label
* - regex: detection pattern
@@ -15,7 +13,7 @@
* - severity: 'critical' (always redact) or 'warning' (flag but allow)
*/
-const REDACT_PATTERNS = [
+const SECRET_PATTERNS = [
// --- API Keys ---
{
name: 'OpenAI API Key',
@@ -163,39 +161,14 @@ const REDACT_PATTERNS = [
},
];
-const AutoRedact = {
- /**
- * Build the full pattern list (built-in + custom).
- * Custom patterns come from settings.customRedactPatterns.
- */
- _buildPatterns(customPatterns) {
- const all = [...REDACT_PATTERNS];
- if (Array.isArray(customPatterns)) {
- for (const cp of customPatterns) {
- if (!cp.enabled || !cp.pattern) continue;
- try {
- all.push({
- name: cp.name || 'Custom Pattern',
- regex: new RegExp(cp.pattern, 'g'),
- redact: cp.redact || '[REDACTED-CUSTOM]',
- severity: 'critical',
- });
- } catch { /* invalid regex — skip */ }
- }
- }
- return all;
- },
-
+const SecretScanner = {
/**
* Scan text for secrets. Returns list of findings.
- * @param {string} text
- * @param {Array} [customPatterns] — from settings.customRedactPatterns
*/
- scan(text, customPatterns) {
+ scan(text) {
const findings = [];
- const patterns = this._buildPatterns(customPatterns);
- for (const pattern of patterns) {
+ for (const pattern of SECRET_PATTERNS) {
// Reset regex lastIndex
pattern.regex.lastIndex = 0;
let match;
@@ -231,11 +204,9 @@ const AutoRedact = {
/**
* Redact all critical secrets in text. Warnings are not auto-redacted.
* Returns { text, redactions[] }
- * @param {string} text
- * @param {Array} [customPatterns] — from settings.customRedactPatterns
*/
- redact(text, customPatterns) {
- const findings = this.scan(text, customPatterns);
+ redact(text) {
+ const findings = this.scan(text);
const redactions = [];
let result = text;
@@ -249,7 +220,7 @@ const AutoRedact = {
redactions.push({
original: f.value,
replaced: f.redactTo,
- category: 'redact',
+ category: 'secret',
pattern: f.name,
});
}
@@ -266,7 +237,7 @@ const AutoRedact = {
};
if (typeof globalThis !== 'undefined') {
- globalThis.AutoRedact = AutoRedact;
+ globalThis.SecretScanner = SecretScanner;
}
-export default AutoRedact;
+export default SecretScanner;
diff --git a/src/lib/storage.js b/src/lib/storage.js
index 4926a08..9a60b2d 100644
--- a/src/lib/storage.js
+++ b/src/lib/storage.js
@@ -23,7 +23,7 @@ const KEYS = {
SETTINGS: 'ss_settings',
};
-// Keys that contain sensitive PII and should be encrypted at rest
+// Keys that contain sensitive PPI and should be encrypted at rest
// All user data keys are encrypted at rest — settings included since
// custom domains and configuration can reveal what services the user
// accesses. Only ss_sync_encryption (salt, verification blob) and
@@ -34,13 +34,12 @@ const DEFAULT_SETTINGS = {
enabled: true,
showHighlights: false,
revealMode: false,
- autoRedact: true,
+ secretScanning: true,
autoDetect: true,
autoRedactDetected: true,
autoAddDetected: true,
- maxLogEntries: 100,
+ maxLogEntries: 200,
customDomains: [],
- customRedactPatterns: [],
categories: ['name', 'email', 'phone', 'address', 'ssn', 'dob', 'domain', 'password', 'general'],
browserSync: false,
};
diff --git a/src/lib/sync.js b/src/lib/sync.js
index 9f442a2..dc40c40 100644
--- a/src/lib/sync.js
+++ b/src/lib/sync.js
@@ -12,9 +12,8 @@
* 5. Custom HTTP endpoint — any URL supporting GET + PUT (WebDAV,
* self-hosted server, cloud function, etc.).
*
- * Encryption: all sync channels REQUIRE encryption with a password
- * (AES-256-GCM) and/or TOTP verification. Syncing without encryption
- * is not permitted — users must set up encryption before enabling sync.
+ * Encryption: all sync channels can optionally encrypt data with a
+ * password (AES-256-GCM) and/or require TOTP verification.
* Authentication is cached with a configurable TTL so the user only
* needs to authenticate when the cache expires and new data exists.
*
@@ -371,9 +370,6 @@ const SilentSendSync = {
const StorageModule = (await import('./storage.js')).default;
await StorageModule.decryptAllData();
- // Disable all sync channels since encryption is mandatory for sync
- await StorageModule.saveSettings({ browserSync: false });
-
await api.storage.local.remove('ss_sync_encryption');
await SilentSendCrypto.clearCachedKey();
await SilentSendCrypto.clearWebAuthnCredential();
@@ -419,7 +415,7 @@ const SilentSendSync = {
*/
async _encryptForSync(data) {
const config = await this._getSyncEncryption();
- if (!config?.enabled) return { data: null, encrypted: false, needsEncryption: true };
+ if (!config?.enabled) return { data, encrypted: false };
const keyInfo = await this._getEncryptionKey();
if (!keyInfo) {
@@ -583,15 +579,12 @@ const SilentSendSync = {
async exportSyncCode() {
const data = await this._getAllData();
- // Encrypt (mandatory)
+ // Encrypt if enabled
const result = await this._encryptForSync(data);
- if (result.needsEncryption) {
- return { needsEncryption: true };
- }
if (result.needsAuth) {
return { needsAuth: true };
}
- const payload = result.data;
+ const payload = result.data || data;
const json = JSON.stringify(payload);
return btoa(unescape(encodeURIComponent(json)));
@@ -647,10 +640,10 @@ const SilentSendSync = {
try {
const data = await this._getAllData();
- // Encrypt (mandatory)
+ // Encrypt if enabled
const result = await this._encryptForSync(data);
- if (result.needsEncryption || result.needsAuth) return; // skip — encryption required
- const payload = result.data;
+ if (result.needsAuth) return; // silently skip — will sync on next auth
+ const payload = result.data || data;
const json = JSON.stringify(payload);
@@ -716,15 +709,12 @@ const SilentSendSync = {
try {
const data = await this._getAllData();
- // Encrypt (mandatory)
+ // Encrypt if enabled
const encResult = await this._encryptForSync(data);
- if (encResult.needsEncryption) {
- return { success: false, needsEncryption: true, reason: 'Encryption must be enabled before syncing.' };
- }
if (encResult.needsAuth) {
return { success: false, needsAuth: true, reason: 'Authentication required.' };
}
- const payload = encResult.data;
+ const payload = encResult.data || data;
const content = JSON.stringify(payload, null, 2);
const stored = await api.storage.local.get('ss_gist_id');
@@ -820,13 +810,10 @@ const SilentSendSync = {
const data = await this._getAllData();
const encResult = await this._encryptForSync(data);
- if (encResult.needsEncryption) {
- return { success: false, needsEncryption: true, reason: 'Encryption must be enabled before syncing.' };
- }
if (encResult.needsAuth) {
return { success: false, needsAuth: true, reason: 'Authentication required.' };
}
- const payload = encResult.data;
+ const payload = encResult.data || data;
const resp = await fetch(url, {
method,
diff --git a/src/options/options.html b/src/options/options.html
index 5a0799e..abac81e 100644
--- a/src/options/options.html
+++ b/src/options/options.html
@@ -49,38 +49,17 @@
-
-
Automatically detect and redact API keys, tokens, passwords, SSNs, credit card numbers, and custom patterns
+
+
Auto-detect and redact API keys, tokens, passwords, SSNs, credit card numbers
-
-
-
-
Custom Redact Patterns
-
- Define your own patterns to catch proprietary tokens, internal URLs with keys, or any format the built-in scanner doesn't cover.
-
-
-
-
-
-
-
-
-
-
-
-
-
- Tip: For a URL like https://dns.example.com/abc123, use a pattern like dns\.example\.com/[A-Za-z0-9;]+ to match the secret path segment.
-
-
-
+
+
Warn when potential personal data (IPs, addresses, paths) is detected that you haven't configured
-
-
Automatically replace detected PII with generic placeholders (192.0.2.1, 123 Example Street, etc.) when sending
+
+
Automatically replace detected PPI with generic placeholders (192.0.2.1, 123 Example Street, etc.) when sending
-
-
Show a + button on detected PII to instantly create a mapping with a suggested fake value
+
+
Show a + button on detected PPI to instantly create a mapping with a suggested fake value
-
+
@@ -127,7 +106,7 @@
🔒 Sync Encryption
- Encryption is required for all sync channels. Set up a password (and optionally TOTP) before enabling any sync method. Authentication is only required when new data arrives and your cached key has expired.
+ Encrypt your sync data with a password, TOTP, or both. Authentication is only required when new data arrives and your cached key has expired.
@@ -382,7 +361,7 @@
Organization
-
Join an organization to receive required substitution rules and auto-redact patterns from your admin. Org rules merge with your personal rules and cannot be disabled.
+
Join an organization to receive required substitution rules and secret scanner patterns from your admin. Org rules merge with your personal rules and cannot be disabled.
@@ -542,31 +521,12 @@
Custom Domains
Add domains for self-hosted AI services (like OpenWebUI). The extension will activate on these domains in addition to the built-in ones.
-
-
+
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- When you add a domain, your browser will ask you to confirm access. No extra steps needed.
+ When you click "Add Domain", your browser will ask you to confirm access. No extra steps needed.