[BEEEP] Secure memory

[coroiu]

🎟️ Tracking

📔 Objective

Proof-of-concept implementation of a "secure memory" storage which is intended to provide:

• Automatic memory zeroing when array buffers are no longer used
• Localized memory allocation with the ability to force zeroing of all allocated memory
• Transparent compatibility with all existing code by extending built-in Uint8Array type

Future versions might implement:

• OS-based protections for heap/stack memory regions, similar to [PM-5693] Migrate SDK to CryptoService sdk-internal#8
  • This could be implemented using alternative Allocators
• Other secure types such as SecureString by using SecureArrayBuffer as underlying storage
• More constrained secure types that don't allow access to the underlying buffer
• Earlier zeroizing and more granular lifetime control, e.g. by allow developers to explicitly zeroize buffers when no longer needed

📸 Screenshots

⏰ Reminders before review

• Contributor guidelines followed
• All formatters and local linters executed and passed
• Written new unit and / or integration tests where applicable
• Protected functional changes with optionality (feature flags)
• Used internationalization (i18n) for all UI strings
• CI builds passed
• Communicated to DevOps any deployment requirements
• Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

• 👍 (:+1:) or similar for great changes
• 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
• ❓ (:question:) for questions
• 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
• 🎨 (:art:) for suggestions / improvements
• ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
• 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
• ⛏ (:pick:) for minor or nitpick changes

[github-actions]

Checkmarx One – Scan Summary & Details – 92082cca-4f1c-4412-a7ad-fdfa2af9098b

Fixed Issues

Severity	Issue	Source File / Package
	Client_DOM_XSS	/apps/web/src/connectors/redirect.ts: 6
	Client_DOM_XSS	/apps/web/src/connectors/redirect.ts: 15
	Absolute_Path_Traversal	/apps/cli/src/oss-serve-configurator.ts: 287
	Absolute_Path_Traversal	/apps/cli/src/oss-serve-configurator.ts: 319
	Absolute_Path_Traversal	/apps/cli/src/oss-serve-configurator.ts: 319
	Absolute_Path_Traversal	/apps/cli/src/oss-serve-configurator.ts: 287
	Angular_Improper_Type_Pipe_Usage	/apps/browser/src/autofill/popup/fido2/fido2-use-browser-link-v1.component.html: 1
	Angular_Improper_Type_Pipe_Usage	/apps/web/src/app/layouts/product-switcher/product-switcher.component.html: 1
	Angular_Improper_Type_Pipe_Usage	/libs/components/src/navigation/nav-divider.component.html: 1
	Angular_Improper_Type_Pipe_Usage	/apps/browser/src/autofill/popup/fido2/fido2-use-browser-link.component.html: 1
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/password-health-members.component.html: 50
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/password-health-members.component.html: 45
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/password-health-members.component.html: 50
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/password-health-members.component.html: 55
	Client_Privacy_Violation	/libs/tools/generator/components/src/credential-generator-history.component.html: 3
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 502
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 514
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 657
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 684
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 670
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 564
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 580
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 557
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 496
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 645
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 643
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 653
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 656
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 409
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 710
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 644
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 453
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 646
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 209
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 647
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 588
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 436
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 413
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 222
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 548
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 1719
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 1719
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 368
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 368
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 1718
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 2873
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 136
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 1644
	Client_Privacy_Violation	/apps/browser/src/autofill/background/overlay.background.ts: 2768
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 484
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/vault/app/vault/view.component.html: 457
	Client_Privacy_Violation	/apps/desktop/src/platform/components/approve-ssh-request.html: 6
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 101
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 101
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 101
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 101
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 76
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 76
	Client_Privacy_Violation	/apps/web/src/app/vault/individual-vault/view.component.ts: 76
	Client_Privacy_Violation

More results are available on AST platform