I observed that when using the browser extension to create a Send, after it pops out (which is has to in order to create it), if you copy the link and go about doing whatever you want with it, and forgetting to go back and close the new Send browser window, it (the vault and popout browser window) don’t lock per the vault lock timeout setting.
I did this earlier today and went back well over the 15 minute lock setting and there was the Send still on the “Copy link” popout.
It appears to me that the popout ends up as an independent window, not tied (controlled any longer by) the browser extension.
Why do you even have to do that? - I can create Sends without popping the window out:
Did you read the sentence in my screenshot that I marked with a red line? It just says so, that popped out windows don’t regard the vault timeout settings…
Hm. I can create a file Send without that request to pop out the window. And I didn’t find anything to that in the help sites or in the Send FAQs.
As the “warning” request/demand to pop out the window doesn’t look like an error in itself, my best guess would be, that it is related to differences in system (OS?) / configuration.
Ah sorry, I am using Windows 10. I just saw the pop out and I thought I recognised it so tried to be helpful but failed. My bad.
PS I tried Brave on Ubuntu, just now, and it does mandate a pop out just like FF does on Win10. Infact Brave on Ubuntu looks more like FF on Win10 that it does to Brave on Win10.
Oh, no no, that’s no “fail” I think. At least it is obvious now, that it has something to do with the browser (Firefox does require the pop out always?!) and also with the OS (Brave - as an example for Chromium browsers I guess - requires the pop out on Linux, but not on Windows).
Of course, very small “sample size” at the moment.
What I don’t understand at the moment: is it possible, to create successfully a file Send with the pop out at all (or rather in all browsers and OS)? Because if not, that would be a clear bug then.
If it worked also with the pop out, that still would be inconvenient. (to put it mildly)
And it at least would have to be documented in the Help Sites, which circumstances lead to the pop out (and it would be nice to know the reason for it, after all).
I’m fine with the popout mechanism; my only concern is that it opens up a security risk since it prevents normal vault locking (at least time-based). If they could fix it so that the vault locked after the timer expired, regardless of whether there is a popout or not, that would solve the issue.
I can offer you a possible explanation. FF dropdown behaves differently from other browsers’: it closes when the “browser” loses focus. For example, if you use Edge, you can login using the dropdown by dragging username/password from another app. In FF, you cannot do this, as soon as the other app has focus, the dropdown closes.
I think this probably would be true with clicking on the “Browse” button when sending a file, if it was just a dropdown. That may be why there is a hard requirement of having to pop it out first because it requires interactions with another UI element (the generic file selection dialog) that typically would close the dropdown.
Also, I can confirm (with not-latest extension) that working with sidebar in FF works as well.