clarkio / azure-mask

A browser extension (Chromium, Firefox) that toggles concealment of sensitive information found in the Azure Portal web page such as Subscription Id's

Azure Mask (Az Mask)

This is a browser extension that will do its best to find and mask GUIDs (such as Subscription IDs), email addresses, keys, and connection strings with a blur. The intention of the extension is to make it easier to do screen recordings without revealing sensitive, personal, account information that may show up on screen. It will only run and apply against Azure portal URLs (see manifest.json for specifics). It's available in Chromium based browsers and Firefox.

Features

• Blurs GUIDs (such as Subscription IDs)
• Blurs your account email
• Hides the "Report a Bug" button (if found)
• Toggle the mask on/off and store this state
• Apply the mask (if enabled) after Document Object Model (DOM) mutations

Install the Extension

Chrome / Edge

From Chrome Web Store

1. In Chrome go to Chrome Web Store
2. Click on Az Mask extension
3. Click on Add To Chrome
4. Confirm any prompts

From Package

1. Go to Releases and download the latest .zip file (e.g. az-mask-1.1.5.zip )
2. Go to the folder you downloaded the zip and extract it.
3. In Chrome go to chrome://extensions
4. Check the "Developer mode" option in the top-right corner
5. Select the button to load extracted extensions.
6. Select the folder you created by unpacking in step 2.
7. Confirm any prompts

From Source

1 - git clone [email protected]:clarkio/azure-mask.git

2a - (Chrome) In Chrome, navigate to chrome://extensions/

2b - (Edge) In Edge, navigate to edge://extensions/

3a - (Chrome) In Chrome, check the "Developer mode" option in the top-right corner

3b - (Edge) In Edge, enable the "Developer mode" toggle on the bottom-left corner

4 - Click the "Load unpacked extension" button

5 - Navigate to where you cloned this repo and then choose /azure-mask/src

After following these steps you should now see the new extension icon in Chrome.

Firefox

1. In Firefox go to Az Mask add-on
2. Click "Add to Firefox"
3. You'll see a pop up notification in the address bar from Firefox. Click "Add"
4. You'll see a confirmation that it was added. Click "Ok"

azure-mask's Issues

Support for aad.portal.azure.com

Thanks for an awesome extension, I noticed that it doesn't appear to work with aad.portal.azure.com, specifically I was looking at the properties page, from portal.azure.com it masks the directory ID but it doesn't do that in aad.portal.azure.com

No license file

For people that would like to contribute, or possibly glean information from the source, there's no license file or associated license listed in GitHub.

Would it be possible to update the repo with the license?

Edge Version

It would be great if we could use this in Edge

Azure Functions triggers reveal secrets

Firefox Version

You mention in the repo description that there is a Firefox version. I don't see that. I would love to try it out in FF.

Doesn't appear to work on latest Chrome?

Azure Mask is no longer on the Chrome Store, and installing it manually fails with an invalid path error.

Mask content of title attribute in profile

The title attribute contains the same sensitive information that is covered by blurred style.
Can the string replacement be used here? At least in the main navigation menu.

The below appears to implement the idea:

regex = /^(?:\b\w*\b:){1}(?:\s)(.*)$/gmi;
match = null;

while((match = regex.exec(title)) !== null) {
  group = match[1];
  newTitle = newTitle.replace(group, group.replace(/[\S]/g, '*'));
}

"Name: ***** ***********
Email: ***************************
Directory: ******* ******** **************************************
Domain: *************************************"

thanks!

show a one way link to the public portal

This would be a link to avoid using ms.portal.azure.com in public. Important to not accidentally break NDA with internal portal updates.

Azure-mask doesn't work in linux browser

OS: openSUSE Leap 42.3
Browser:

• Google Chrome 64.0.3282.167 ( 64 bits )
• Firefox 52.6.0 ( 64 bits )
  Install and enable Azure-mask in Chrome and Firefox with openSUSE Leap 42.3, but doesn't work.
  Azure-mask in Chrome and Firefox with Mac OS is work

Tooltips appear and could leak information

The masking is good, but there are a number of parts of the portal where you could mouse over the obscured text and Azure dutifully discloses the obscured portion through a tooltip.

Everywhere that I've had a subscription ID it has appeared there, it also appears in the top right corner where your profile information is.

Subscription ID visible in Cost Management menu

V1

MUST

• URL Shortener not visible by default
• Gear icon top left
• Gear toggles settings
• Move shortener alias to settings

SHOULD

• Key field in settings
• Add toggle to collapse doc bot comments
• Toggle icon if masking is on

Cost Management reveals personal contact and address information

Hey,
Should personal sensitive information (email, contact phone, address, etc) be visible in plain text or should be masked by extension?
The info appears in this blade: > Cost Management + Billing - Contact info/ > Cost Management + Billing - Billing address

Thanks!

Replace person info with a placeholder

According to MicrosoftDocs guidance, we should replace personal info with a placeholder. For example, , as shown in this image.

https://github.com/MicrosoftDocs/docs-help-pr/blob/master/help-content/contribute/media/contribute-how-to-write-art/placeholder-in-screenshot-correct.png

Resources showing subscriptionID on chrome

Hi,

It seems that on version 1.1.5 of azure-mask and Version 80.0.3987.149 of Chrome, for some resources the sub IDs are initially obscured, but when the site fully loads, the subscription ID is once again shown in clear text.

Some examples are consumption app service plans & azure web apps. For the app service plan, the masking happens again when you mouse-over the subscription ID, but for the web app itself this did not happen.

Az Mask does not mask subscription ID in various Azure NetApp Files control plane locations

Hi @scottcate Geert van Teylingen Azure NetApp Files Group PM here.

We are interested in leveraging Az Mask for demo/video creation purposes, but the tool does not seem to pick up on all subscription ID fields in various Azure NetApp Files control plane blades.

Also, would be great to have an option to add free text strings for custom masking.

Can we work with you on these?

Gone from Chrome Web Store

The extension is no more available on the Chrome Web Store. What happened and will it be back?

Tenant ID not masked on the Azure AD Overview blade

On this URL, the tenant ID of the AAD is not masked, using az-mask 1.1.10.
https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview

Replace user avatar with a generic one

I don't if it's a regression, but I just installed the latest version and with the mask toggled on I can still see my avatar on the Azure portal, I expected it to be replaced by a generic image:

Azure mask does not seem to work if the url is portal.azure.com

i have enabled Azmask in Edge and while it works if the url is msportal.azure.com, it does not work when i click on Azure AD B2C tenant which opens in new tab.

Better normalized channel/event data

If the user doesn't specify a channel/event, then it ends up like "--username" when really it should eliminate the "--"

The Bot Framework MicrosoftAppPassword is not masked at all

The extensions masks MicrosoftAppId key, but the more important MicrosoftAppPassword seems to be not maked at all:

Thanks!

Mask IP's

Not Masking IP's, I have an Azure IP and it displays my Private Static IP, would be nice to mask that.

Would be nice to use on other sites, maybe custom masks?

Moving the ownership of azure-mask

Hey @clarkio,
Hope you're doing great!

This extension continues its usage expansion, which is great :). Yet there are some bugs that are unaddressed, and some use cases are not covered. I would love to fix that.

On my end, it seems that the best way to move forward is to transfer the ownership to someone else that can provide regular contributions (could be me in the interim). That way, we can retain SEO, Trace of previous contributions and ownership, and existing issues.

Would you be open to that? We can chat about it privately if needed (@cmaneu on Twitter or chmaneu@ MSFT).

Subscription ID visible on storage account

Hello, thanks for writing this extension. I noticed that in the storage account tab we can still see the subscription id

Set modules screen on IoT Hub doesn't hide Container Registry Settings

Step 1: Add Modules

Particular fields that should be hidden are USER NAME & PASSWORD.

Perhaps also ADDRESS

Step 3: Review Deployment

Likely need to hide the entire summary field as it contains the same credentials for the regstries

masking directory name

The directory name in the top right corner (or in the directory pick tag) should be masked as well as it will normally include the organization name which might be an issue when showing different accounts

Mask Current Cost Fields

Example of issue

Keys showing on Cognitive Services QnA maker

From a livestream by @csharpfritz

https://clips.twitch.tv/SuaveWiseWolverinePJSalt

Add @all-contributors bot to the repo

Doesn't support Azure gov portals

Need to update the manifest to support portal.azure.us in addition to portal.azure.com. Not sure if it's better to add more match options to the array or to make a wildcard/globbing option for portal.azure.*.

Az Mask doesn't mask email on Synapse Studio

Az Mask doesn't mask email on Synapse Studio. The followings are FQDNs of Synapse Studio.

• (FQDN for normal users) web.azuresynapse.net
• (FQDN for MSFT users) ms.web.azuresynapse.net

Below is a screenshot of Synapse Studio opened in Microsoft Edge with Az Mask installed.