Santize TOTP key prior to storin in OTP format

keepassxreboot · Feb 4, 2019 · 543d3e6 · 543d3e6
1 parent 79029ab
commit 543d3e6
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/totp/totp.cpp b/src/totp/totp.cpp
@@ -138,7 +138,10 @@ QString Totp::writeSettings(const QSharedPointer<Totp::Settings>& settings,
         return urlstring;
     } else if (settings->keeOtp) {
         // KeeOtp output
-        return QString("key=%1&size=%2&step=%3").arg(settings->key).arg(settings->digits).arg(settings->step);
+        return QString("key=%1&size=%2&step=%3")
+            .arg(QString(Base32::sanitizeInput(settings->key.toLatin1())))
+            .arg(settings->digits)
+            .arg(settings->step);
     } else if (!settings->encoder.shortName.isEmpty()) {
         // Semicolon output [step];[encoder]
         return QString("%1;%2").arg(settings->step).arg(settings->encoder.shortName);