workspaces-issues icon indicating copy to clipboard operation
workspaces-issues copied to clipboard

[Bug] - Chrome Extension passes the target URL in clear text causing a web filter to flag it

Open jbarr opened this issue 8 months ago • 1 comments

Existing Resources

  • [X ] Please search the existing issues for related problems
  • [X ] Consult the product documentation : Docs
  • [X ] Consult the FAQ : FAQ
  • [X ] Consult the Troubleshooting Guide : Guide
  • [X ] Reviewed existing training videos: Youtube

Describe the bug When using the Chrome Extension to open a URL in an isolated browser, it appears that the target URL is passed in clear text through the Extension such that a local web filter can see the target URL and may apply filters based on the target URL.

I work for a company whose web filter alerts when a user makes a "Connection to a Known Embargo Country" and it appears that the web filter flagged my usage based on the URL passed through the Wxtension.

To Reproduce Not sure how to specifically reproduce other than to say that when I try to visit an out-of-bounds site using the extension, it gets flagged by our web filter.

Expected behavior Right-clicking on a URL and using the extension to open an isolated browser in a Kasm Workspace should pass the data in an obfuscated or encrypted format that prevents a web filter from acting on the actual target URL.

Workspaces Version 1.15.0.577587

Workspaces Installation Method Single Server Docker instance on a Ubuntu VM hosted on a Proxmox server

Client Browser (please complete the following information):

  • OS: Windows 11
  • Browser: Chrome
  • Version: 126.0.6478.61

jbarr avatar Jun 14 '24 14:06 jbarr