Prevent Illegal Invokcation on getPublicKey/getPublicKeyAlgorithm (#2323

) Prevent Illegal Invocation on getPublicKey/getPublicKeyAlgorithm
keepassxreboot · Oct 5, 2024 · 928ed65 · 928ed65
1 parent 5efa515
commit 928ed65
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/keepassxc-browser/content/passkeys.js b/keepassxc-browser/content/passkeys.js
@@ -31,10 +31,11 @@ const createAttestationResponse = function(publicKey) {
         attestationObject: kpxcBase64ToArrayBuffer(publicKey.response.attestationObject),
         clientDataJSON: kpxcBase64ToArrayBuffer(publicKey.response.clientDataJSON),
         getAuthenticatorData: () => kpxcBase64ToArrayBuffer(publicKey.response?.authenticatorData),
+        getPublicKey: () => null,
+        getPublicKeyAlgorithm: () => publicKey.response?.publicKeyAlgorithm,
         getTransports: () => [ 'internal' ]
     };
-
-    return Object.setPrototypeOf(response, AuthenticatorAttestationResponse.prototype);
+    return  Object.setPrototypeOf(response, AuthenticatorAttestationResponse.prototype);
 };
 
 // Wraps response to AuthenticatorAssertionResponse object