Improvements
* Added support for launching web sessions from Connection Manager 2.7 planned for release in June 2025.

Fixed Issues
* An issue with password generation from the context menu has been resolved.
* When launching from an allow list, the audit log now shows the URL selected from the list.
* WPF now includes 'Sign In' text near fields as an indicator signal for login form detection.
* Fixed a conflict between Web Password Filler and Menlo Remote Browser Isolation that caused usernames and passwords to be populated incorrectly.
* Input threshold now properly prevents autofilling if a page contains more fields than the threshold value.
* WPF is now able to autofill TOTP for the Okta site.
* WPF now correctly autofills TOTP during platform login.
* Fixed an issue where the WPF login window would minimize in Firefox 136 on MacOS Sequoia.

Fixed Issues
* The 'Update and Save' pop-up did not appear on some sites.
* Fixed an issue where, if the Native Messaging Host was configured, users could only select domains registered in the settings.json file.
* Web Password Filer would preent the login pop-up from appearing when idle.
* A 'Log in and continue' pop-up has been added if Web Password Filler is not configured with any sites, or has not been logged in.
* If a user attempts to autofill using a secret that does not have a web launcher mapped, the system now displays 'Unabel to autofill from the selected Secret' instead of silently failing.
* Web Password Filler now automatically populates the username field and displays the Delinea Web Password Filler icon during logins on Data Domain System Manager (DD2) DELL EMC devices.
* Fixed an issue where the username would not autofill properly on Sophos.

Improvements
* The Delinea icon is now visible on the username field on any site when Exact Match is enabled and there are no matching secrets and prompts to save credentials work properly in this scenario.

Fixed Issues
* The password field was not getting auto-filled on some sites.
* On some sites, the Secret list appeared in the right corner of the site when the Delinea icon was clicked in the username field.
* The Save and Update Password pop-ups were not working properly on some sites.
* Web Password Filler was not submitting tickets according to the configured settings.
* Fixed the security pop-up, which now displays and aligns properly on the Screenrant site.
* Delinea icon was not visible on the Supermicro device management login page.
* Two error messages were being displayed instead of one when entering the ticket number for a Service Now ticketing system on a secret that requires comment to view."
* The TOTP was not autofilling on AWS logins.

Improvements
* Improved security of password handling when adding new secrets.
* The prompt to add new secrets now automatically closes after 3 minutes.

Fixed Issues
* For some login pages, the WPF icon was not clickable and users could not display the autofill suggestions.
* After closing recorded sessions for myapps.microsoft.com Web Password Filler was unable to force the site to log out.
* WPF did not autofill the TOTP code on the AWS console login page.
* Prevent scripts on pages that clear login fields from automatically clearing fields after WPF autofills.
* Web Password Filler did not autofill credentials on VMware vRealize.
* The secret URL overlapped with the secret name in the autofill suggestions list on some sites.
* Fixed issues where the WPF icon was incorrectly appearing on input fields within Secret Server and Delinea Platform.

Improvements
* Web Password Filler now auto-fills credentials on all the Secret Server and Delinea Platform login pages.
* WPF no longer automatically logs out when a Secret Server or Platform tab is logged out or expires due to inactivity.

Fixed Issues
* Web Password Filler would automatically save a secret if there was only one active template with a URL field. It now displays the Add Secret dialog so users can switch the folder before saving.
* The WPF icon was not appearing on the Verint login page.
* The token refresh interval in WPF has been changed to prevent issues caused by the refresh occurring after the access token has expired.
* WPF automatically filled the username into the MFA field on the Jira Service Management login page.

Improvements
* Web Password Filler has enhanced how it prioritizes and sorts autofill suggestions:
* Prioritizes exact matches of the URL first, with favorites that match the URL appearing first.
* Sorts secrets based on their URL hierarchy.
* Fixed a potential XSS vulnerability when rendering field names during a new secret creation.

Fixed Issues
* Web Password Filler displayed an error message when users added a secret using a secret template where two
fields have the same name.
* Changed how Web Password Filler sets the value of TOTP fields to fix an issue where some websites did not
detect that a value was entered.
* WPF failed to log users out of the site when secret checkout expired in incognito mode.
* WPF incorrectly identified another field on the site as a login field and auto-populated the credentials into that
field.
* WPF failed to log out users from the site when checkout expired or when forcefully checked in.

Fixed Issues
* Web Password Filler did not set the folder for new secrets to the user's personal folder by default.

Enhancements
* Allow login pages using a search field as the username to be identified and autofilled if the field is manually mapped.
* Updated session expiration messages to include the site of the tabs that are being closed.
Bug Fixes
* Fixed an issue autofilling FortiMail login.
* Fixed an issue where recorded sessions from secrets requiring checkout would be terminated before the checkout expired. This occurred when the secret also required MFA and the MFA passthrough time was less than the checkout time.
* Fixed an issue where WPF could log out prematurely when sharing a login session with a web login in a browser tab.
* Changed WPF login for Platform so that WPF will not log out if a Platform session in a browser tab times out due to inactivity in the tab. This also means that Platform will not automatically be logged in if opened in the browser while WPF is logged in.
* Fixed an issue detecting the username field on some Cisco login pages.
* Fixed an issue with Platform logins that use Microsoft SSO when Native Messaging Host is installed.

Changes and Improvements
* Removed unnecessary extra calls to search-by-url that are affecting performance for some users.
* Updated to handle new 401 status code results sent by Secret Server API calls as invalid token in addition to 403 status codes returned by previous versions of Secret Server.

IMPROVEMENTS
* Due to new security restrictions in the latest versions of Safari, the browser can no longer differentiate between different types of connection errors. As a result, Web Password Filler now displays a more general error message: 'Unable to reach server. Verify that the server URL is correct, and that the server has a valid
certificate.' This message appears for both certificate and network issues.
* The caching of autofill matches have been removed. Web Password Filler now calls Secret Server every time it finds a login page. This change prevents issues where the system did not present new secrets to users for
autofill.

BUG FIXES
* A bug in the caching logic caused some secrets to not show up in the autofill match list.
* The refresh icon appeared in the popup if the user did not have the 'Add Secret' permission and no secrets were
present for that site.
* Web Password Filler would sometimes display the 'Add Secret' dialog in the wrong browser window when
adding a secret.
* When working in Mimecast, the Web Password Filler icon was displayed for some email fields, even though
those fields were not valid for autofill.
* https://sso.cloud.com would not autofill in Web Password Filler.
* Fixed an issue that caused visual corruption in some recorded sessions.
* When using the Web Password Filler popup window to generate a password, the generated password
contained duplicate letters. The passwords generated did not follow the Secret Server password policy.
* The system sometimes displayed 404 errors to the user when making background network calls to check the
validity of login URLs.
* Updated the autofill field detection logic to handle login forms in Italian.
*Web Password Filler did not close launched Chrome sessions upon secret check in or when the secret timeout
limit was reached.
* Web Password Filler reloaded the username page after the user submitted the username on some sites.
* An OTP API call occurred every 30 seconds, even if the user did not have the secret information page open.

Bug Fixes
* Fixed an issue where launching a recorded secret with a list of URLs to a redirected URL was not autofilling properly.
* Fixed an issue with the copy password functionality in the new autofill menu, allowing users to successfully copy passwords from it.
* Updated the OTP field detection logic to prevent a case where a password field was misinterpreted as an OTP field.

This is a bugfix for the 3.9.0 release. For a full list of changes between 3.8.0 and 3.9.0, see https://docs.delinea.com/online-help/web-password-filler/release-notes/3.9.0.htm

Bugfixes to 3.9.0 in this release:
* Fixed an issue where launching a recorded secret with a list of URLs to a redirected URL was not autofilling properly.
* Fixed an issue with the copy password functionality in the new autofill menu, allowing users to successfully copy passwords from it.
* Updated the OTP field detection logic to prevent a case where a password field was misinterpreted as an OTP field.

Improvements
* When Web Password Filler is logging out, either by user action, switching Secret Servers on launch, or due to an active browser tab to the same Secret Server or Platform tenant logging out, Web Password Filler will now warn the user if there are active recorded sessions and give them the option to continue without logging out of WPF.
* Web Password Filler now displays the folder name under Secret Details instead of the folder ID. When a user hovers the mouse over folders, the folder path is revealed as a tooltip. Shared secrets with restricted access will show the folder name as 'Restricted Folder'. Root folders will display the folder name as 'None', and when hovering the mouse over a root folder, it will display as 'No Folder'.

Bug Fixes
* Web Password Filler would continuously open new tabs if users turned off the 'Secret Server Login New Window' setting through the Native Messaging Host.
* When users selected the '+' button on the Web Password Filler pop-up to add a secret, it would close the pop-up and not display the 'Add Secret' dialog.
* The Web Password Filler pop-up displayed an invalid logo when saving updated user inputs for username or password.
* Corrected an issue where the Web Password Filler required the 'Session Recording Limit' and 'Input Threshold' drop-down values to be the same number.
* Previously, when Web Password Filler encountered an error logging in it displayed a continually connecting window. In this release, Web Password Filler shows a connecting window with an error message.
* Web Password Filler sometimes automatically logged in when a user logged into Secret Server or Platform in the browser, even though the current URL in Web Password Filler did not match.
* Previously, if the platform user had clicked the 'Cancel' button during a challenge, logged out, then attempted to log in again while the Web Password Filler pop-up was open, the user encountered a challenge pop-up instead of logging in.
* When using Safari 17 the Web Password Filler pop-up would close once the MFA challenge was completed.
* When Safari 17.1 was used, it displayed font weights incorrectly for field labels.
* In Safari 17.1, it did not show a warning when a user launched an incognito tab and the extension was not allowed in private browsing mode.
* In Safari 17.1, certain images in Web Password Filler failed to display.
* Web Password Filler experienced a timing issue with the refresh of Platform tokens, causing it to log out after 1 hour.

Known Issue
* If Web Password Filler is logged into Platform and a browser tab is open to the same Platform tenant that is logged out or times out, Web Password Filler will not be able to refresh its token and will log out. This will be fixed in a future release.

Bug Fixes
* Fixed an issue when logged into Platform where the user would get logged out before their session expired.
* Fixed an issue so that users can now launch a secret sucessfully if Native Messaging Host is configured using a url without any protocol.

Features
Users will now see a list of Recent web secrets that is consistent with the Recent secrets list they see in their Secret Server web portal view.
Users will now see a list of Favorite web secrets that is consistent with the Favorite secrets list they see in their Secret Server web portal view.
Users can search for any of their web secrets from the Recent list in the Web Password Filler using any searchable field.

Improvements
Web Password Filler now displays a message when launched from a different Secret Server vault than what is configured for that Web Password Filler by the Native Messaging Host

Bug Fixes
Fixed an issue where the Save button was getting enabled after filling in mandatory fields in the Add Secret window.
Fixed an issue where Web Password Filler displayed an "Platform Identity Authentication has failed" error message when logged into the Delinea Platform.
Fixed an issue with slow page performance when Web Password Filler is enabled.
Fixed an issue where Web Password Filler was accepting a "0" value in numerical dropdown fields.
Fixed an issue where Web Password Filler was displaying improper styling on certain sites.
Fixed an issue where keyboard shortcuts were note working correctly.
Fixed an issue where Web Password Filler failed to launch a secret for users who did not have the Add Secret permissions.
Fixed an issue where users were unable to click the Login button.
Fixed an issue where Web Password Filler was not auto-filling BitBucket login pages and for a few other sites.
Fixed an issue where the Add Secret button was not disabled on blank pages.
Fixed an issue where Save and Update features were not working on some sites.
Fixed an issue where Web Password Filler displayed an "Invalid URL" error message while refreshing secret.
Fixed an issue where Web Password Filler was adding extra spaces when copying the username to the clipboard.
Fixed an issue where Web Password Filler was not displaying a "Bad Request" message if a user entered an invalid URL.
Fixed an issue where the copy button was causing URL text or usernames to be overridden.

Features
* When logged into the Delinea Platform, users can access secrets guarded by an MFA challenge. Upon successful completion of the MFA challenge, users can launch the site, copy the password if permitted, see secret details, and complete other allowed actions.

General Improvements
* Improved session recording stability.

Security Improvements
* Updated third-party libraries to address discovered security vulnerabilities.

Bug Fixes
* Fixed an issue where passwords were not being auto-filled on certain sites.
* Fixed an issue where the Web Password Filler icon was appearing in fields that were not login form fields.
* Fixed an issue where where the _Check in_ functionality was not logging out users from the site when they checked in the secret.
* Fixed an issue where the session recording was not stopping when the user was logged out due to check out expiring.
* Fixed an issue where users were not able to log in to Web Password Filler automatically via SAML.
* Fixed an issue where all URL fields were being autofilled with the site URL value.
* Fixed a display issue with the Web Password Filler's main form that occurred after Chrome upgraded to version 116.

Known Issues
* As a result of fixing the issue with false positive field matches, secrets are not being autofilled on Microsens portals. This will be fixed in the next release.

Improvements
* When users attempt to access a secret that is guarded by MFA, they will see a message that the secret is blocked by an MFA challenge.
* Added a usability improvement to make the drop down URL field less confusing when there is no URL selected.
* Added a toggle to enable/disable cursor tracking on session recording.

Bug Fixes
* Fixed an issue where a Continue button was being displayed in the Comment required popup, instead of Checkout.
* Fixed an issue where the “Add Secret” button was not disabled on a blank page
* Fixed an issue where Web Password Filler was not launching a secret without an http protocol.

Features
* Users can login to their Delinea Platform tenant URLs with Web Password Filler. Web Password Filler will connect seamlessly to their Platform tenant vault and users will be able to use web-based secrets in the vault in the same way as they do today with a direct Secret Server vault integration.

Bug Fixes
* Fixed an issue where the self-signed certificate message was being displayed on various sites with valid certificates.

Reverted Platform integration to resolve several bugs when logging into Secret Server.

Users can now login to their Delinea Platform tenant URLs with Web Password Filler. Web Password Filler will connect seamlessly to their Platform tenant vault and users will be able to use web-based secrets in the vault in the same way as they do today with a direct Secret Server vault integration.

Delinea Web Password Filler (WPF) extension for Secret Server has a new modern look and feel and provides secure access to your web based Secrets.

This extension requires use and integration with Secret Server version 10.7.59 and later.

Features include: Secrets Creation (simple and advanced methods), Secrets template selection, complex password generation, Secrets saving in Secret Server, credential population in user name/password fields.

Users authenticate to Secret Server directly from the web extension. Support for 2FA options such as DUO, single sign-on, SAML and other multi-factor authentication mechanisms is included.

The extension automatically identifies the existence of credential fields and will automatically populate them based on existing Secrets, as well as identifying manual entry of new credentials in a web page, offering to save them as a secret.


Full Release Notes: https://docs.delinea.com/wpf/current/release-notes/3.5.0.md

Web Password Filler 3.4.4 is a hotfix that resolves an issue autofilling some sites after upgrading to 3.4.3. It also resolves an autofill issue in incognito mode.

For a complete list of changes, see https://docs.delinea.com/wpf/current/release-notes/3.4.4.md

Features
* If a user enters a Secret Server URL without a protocol, Web Password Filler will set https:// as the default protocol and will allow the user to login as if they entered https:// from the outset.

Security Improvements
* Added security improvements that prevent malicious pages from exploiting Web Password Filler functionality to change the URL of a user’s Secret Server and read user requests to fill out forms.

Bug Fixes
* Fixed an issue where Web Password Filler was cropping the session recording videos
* Fixed an issue where Web Password Filler was not filling out passwords for certain sites
* Fixed and issue where the Add Secret button was enabled for users who did not have permissions to add secrets

• Web Password Filler now redirects http Secret Server URLs to https
• Web Password Filler will auto-correct https:/ or https:/// to https://
• Fixed an issue where nothing would happen when the user clicked “+” to add a secret in Chrome on a Mac
• Fixed an issue where Web Password Filler would not auto-populate when using URL lists
• Fixed an issue where users with View Only permissions were unable to use URL lists
• Fixed an issue where Web Password Filler was not properly handling special characters when adding a secret
• Fixed an issue where the Copy Generated Password functionality was not working
• Fixed an issue where Web Password Filler was not filling in passwords for some sites
• Fixed an issue where session processing would take too long for sites mentioned in extended mapping
• Fixed an issue where Web Password Filler was overwriting other mapped fields if the input type was “password”

Bug Fixes
* Fixed an issue where users were denied access to Viewing Secrets, Adding Secrets and Editing Secrets in Web Password Filler version 3.2
* Fixed an issue where Web Password Filler was prompting users to create a secret when logging into a site that already has a secret
* Fixed an issue where the web launcher was not honoring field mapping for the Username
* Fixed an issue where Web Password Filler was not working properly on the VMWare Horizon login page

# 3.4.0 Release Notes

_August 18th, 2022_
## Features
* Users can now add comments when checking out secrets that are configured to integrate with ticketing systems. Additionally, this workflow also applies to sites that are restricted to incognito mode access.
## Product Enhancements
* Implemented updates to support autofill with:
* https://auth.ncloud.com
* https://reporting.retire-it.com
* https://sso.redhat.com
## Bug Fixes
* Fixed an issue where Web Password Filler does not fill in the username and password when launching a site from the URL field and Session Recording is enabled on the secret.
* Fixed an issue where Google profiles would get logged out when session recording is enabled.
* Fixed an issue where Web Password Filler would not autofill websites launched from Secret Server when Web Launcher requires Incognito Mode to be enabled.