KeePassXC Password is still stored in the history

[ioalexander]

Current Behavior: After KeePassXC’s 10-second timeout, the password is removed from the active clipboard (e.g., cannot be pasted via CTRL+V), but it remains in the clipboard history managed by Clipcat.

Expected Behavior: Once the timeout expires, the password should also be removed from clipboard history to prevent unintended access.

---

This behavior seems to me like a soft of security flaw (I'm unsure how clipboard history is stored in binary file). Passwords should not persist in clipboard history after KeePassXC clears it from the primary clipboard.

---

Environment:
Arch Linux
Clipcat Version: 0.21.0-1
KeePassXC: Flatpak

[sandr01d]

I think this is mostly solved by #716, which allows for password from KeePassXC being excluded from ever being saved to the history. Can be configured like this in your clipcatd.toml:

[watcher]
sensitive_mime_types = ["x-kde-passwordManagerHint"]