When quickly navigating, All Items (occasionally) treated as Trash #1172

New Issue

Closed

opened 2026-02-05 00:13:34 +03:00 by OVERLORD · 4 comments

OVERLORD commented 2026-02-05 00:13:34 +03:00

Owner

Copy Link

Originally created by @ZacharyTalis on GitHub (Dec 21, 2021).

Subject of the issue

Behavior within web vault makes 'trashless' item deletion possible.

Deployment environment

Latest docker image (1.23.1) and web vault (2.25.0).

Steps to reproduce

1. Log into web vault from new tab.
2. Quickly click on Trash in the left sidebar.
3. Sometimes, items not in Trash will display. These items can be deleted permanently without moving into Trash.

Troubleshooting data

Thank heavens for backups, I accidentally deleted 500 items this way 🐙

It's difficult to tell whether this issue is server-side or client-side. Ideally, a web session shouldn't have permissions to permanently delete non-trashed items.

Originally created by @ZacharyTalis on GitHub (Dec 21, 2021). ### Subject of the issue Behavior within web vault makes 'trashless' item deletion possible. ### Deployment environment Latest docker image (1.23.1) and web vault (2.25.0). ### Steps to reproduce 1. Log into web vault from new tab. 2. Quickly click on `Trash` in the left sidebar. 3. *Sometimes*, items not in Trash will display. These items can be deleted permanently without moving into Trash. ### Troubleshooting data Thank heavens for backups, I accidentally deleted 500 items this way 🐙 It's difficult to tell whether this issue is server-side or client-side. Ideally, a web session shouldn't have permissions to permanently delete non-trashed items. 

OVERLORD added the Third party label 2026-02-05 00:13:34 +03:00

OVERLORD closed this issue 2026-02-05 00:13:37 +03:00

OVERLORD commented 2026-02-05 00:13:41 +03:00

Author

Owner

Copy Link

@BlackDex commented on GitHub (Dec 21, 2021):

I really can't reproduce this at all.
Also, if this sometimes happens, then i think it strangely is a client bug.
The API calls for deleting from the vault and deleting from the trash are different. Also, deleting items from the trash also show the text Permanently, and it also gives an extra warning about it being deleted permanently.

So, I'm a bit hesitant on changing the server regarding this. Also, since the user gets warned about this in strong words.
Though we could maybe add some special check if the it really is in the trash, this just shouldn't happen on the client side at all.

Are you sure you didn't just deleted these items normally first, and then went to the trash and deleted them again?
Also, what happens if you create a new account with lesser items, does this also happens? Or only with this amount of items?

@BlackDex commented on GitHub (Dec 21, 2021): I really can't reproduce this at all. Also, if this sometimes happens, then i think it strangely is a client bug. The API calls for deleting from the vault and deleting from the trash are different. Also, deleting items from the trash also show the text `Permanently`, and it also gives an extra warning about it being deleted permanently. So, I'm a bit hesitant on changing the server regarding this. Also, since the user gets warned about this in strong words. Though we could maybe add some special check if the it really is in the trash, this just shouldn't happen on the client side at all. Are you sure you didn't just deleted these items normally first, and then went to the trash and deleted them again? Also, what happens if you create a new account with lesser items, does this also happens? Or only with this amount of items?

OVERLORD commented 2026-02-05 00:13:45 +03:00

Author

Owner

Copy Link

@ZacharyTalis commented on GitHub (Dec 21, 2021):

I only deleted those items once, yep. The strongly-worded Permanently warning appeared, but I failed to realize the selected items were from outside Trash.

I'm glad those API calls are separate. So yeah, I'd suppose this is a weird client bug...

I'm not able to test with a new account, unfortunately. I can, however, provide you with a video of the bug in action:

https://user-images.githubusercontent.com/23324896/146945567-6d23ec3b-40c1-4f32-bbb8-824a33c3fe6b.mp4

This is also the behavior when Firefox is in Troubleshoot Mode. Firefox Dev Edition v96.0b7 on Linux.

One last note: all my items technically belong to an organization and its collection (SphorbZone in the video, bless our naming scheme).

Feel free to close this issue if you find it unreproducible <3

@ZacharyTalis commented on GitHub (Dec 21, 2021): I only deleted those items once, yep. The strongly-worded `Permanently` warning appeared, but I failed to realize the selected items were from outside Trash. I'm glad those API calls are separate. So yeah, I'd suppose this is a weird client bug... I'm not able to test with a new account, unfortunately. I can, however, provide you with a video of the bug in action: https://user-images.githubusercontent.com/23324896/146945567-6d23ec3b-40c1-4f32-bbb8-824a33c3fe6b.mp4 This is also the behavior when Firefox is in [Troubleshoot Mode](https://support.mozilla.org/en-US/kb/diagnose-firefox-issues-using-troubleshoot-mode). Firefox Dev Edition v96.0b7 on Linux. One last note: all my items technically belong to an organization and its collection (`SphorbZone` in the video, bless our naming scheme). Feel free to close this issue if you find it unreproducible <3

OVERLORD commented 2026-02-05 00:13:48 +03:00

Author

Owner

Copy Link

@BlackDex commented on GitHub (Dec 21, 2021):

Ah.. so it is still loading the items, and then you click on the trash icon before the items are loaded.
Ill do a quick test with a lot of items my self, but i think this is a client-bug.

@BlackDex commented on GitHub (Dec 21, 2021): Ah.. so it is still loading the items, and then you click on the trash icon before the items are loaded. Ill do a quick test with a lot of items my self, but i think this is a client-bug.

OVERLORD commented 2026-02-05 00:13:50 +03:00

Author

Owner

Copy Link

@BlackDex commented on GitHub (Dec 21, 2021):

Ok, i just tested this on both Vaultwarden and a Self-Hosted Bitwarden environment.
It happens on both and the whole senario as described above is the same for both.

What i saw is the following.

1. Have a huge amount of items which could take a while to load
2. Login and directly click on the Trash link while the spinner is still active for loading all the vault items.
3. When deleting an individual item it will be sent to the trash, so nothing wrong there.
4. When selecting multiple items and using the top-gear to Permanently delete these items, they will be Permanently deleted.

The reason this happens is that the web-vault has changed the interface to the trash environment, and that triggers a different API for multiple selections.

I suggest that you report this issues here: https://github.com/bitwarden/web/issues
That would be the correct location for this bug/issue.

@BlackDex commented on GitHub (Dec 21, 2021): Ok, i just tested this on both Vaultwarden and a Self-Hosted Bitwarden environment. It happens on both and the whole senario as described above is the same for both. What i saw is the following. 1. Have a huge amount of items which could take a while to load 2. Login and directly click on the Trash link while the spinner is still active for loading all the vault items. 3. When deleting an individual item it will be sent to the trash, so nothing wrong there. 4. When selecting multiple items and using the top-gear to `Permanently` delete these items, they will be **Permanently deleted**. The reason this happens is that the web-vault has changed the interface to the trash environment, and that triggers a different API for multiple selections. I suggest that you report this issues here: https://github.com/bitwarden/web/issues That would be the correct location for this bug/issue.

OVERLORD referenced this issue 2026-02-05 05:01:42 +03:00

[PR #1172] [MERGED] Updated .env.template with missing config values. #2876

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

cached-config-operations

test_dylint

1.35.2

1.35.1

1.35.0

1.34.3

1.34.2

1.34.1

1.34.0

1.33.2

1.33.1

1.33.0

1.32.7

1.32.6

1.32.5

1.32.4

1.32.3

1.32.2

1.32.1

1.32.0

1.31.0

1.30.5

1.30.4

1.30.3

1.30.2

1.30.1

1.30.0

1.29.2

1.29.1

1.29.0

1.28.1

1.28.0

1.27.0

1.26.0

1.25.2

1.25.1

1.25.0

1.24.0

1.23.1

1.23.0

1.22.2

1.22.1

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.1

1.15.0

1.14.2

1.14.1

1.14

1.13.1

1.13.0

1.12.0

1.11.0

1.10.0

1.9.1

1.9.0

1.8.0

1.7.0

1.6.1

1.6.0

1.5.0

1.4.0

1.3.0

1.2.0

1.1.0

1.0.0

0.13.0

0.12.0

0.11.0

0.10.0

0.9.0

Labels

Clear labels

SSO

Third party

better for forum

bug

bug

documentation

duplicate

enhancement

future Vault

future Vault

future Vault

good first issue

help wanted

low priority

notes

pull-request

Mirrored from GitHub Pull Request

question

troubleshooting

wontfix

No Label Third party

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

OVERLORD

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1172