Dominik Reichl

Not yet; I'll post in FR 2990 when there are news about it. Best regards, Dominik

XML Replace crashes when "Find what" and "Replace what" are empty

Many thanks for reporting this issue! The [OK] button of the XML Replace dialog is now disabled when the node selection XPath expression or the search text (if necessary) is empty. Furthermore, I've added a check in the string replacement method that XML Replace uses (which may also be used by plugins, PowerShell scripts, etc.). Here's the latest development snapshot for testing: https://keepass.info/filepool/KeePass_260817.zip Best regards, Dominik

password generation with custom string does not work

This is the intended/expected behavior (also for the UUID). Most other applications behave similarly (for example, when you copy a file with Windows Explorer, the copy's creation time is set to the current time). Best regards, Dominik

You need to use the development snapshot for testing. KeePass 2.61.1 and earlier do not support the new functions yet. Best regards, Dominik

The two XPath expressions that you posted are working fine for me. Maybe one of the history entries of your entry is matching. Make sure that the 'History' option (in the 'Search in' group of the 'Find' dialog) is deactivated. Best regards, Dominik

I would prefer security vulnerabilities to be reported to me privately at first (responsible disclosure), e.g. via e-mail or the contact form (see https://keepass.info/contact.html for both) or as a ticket here on SourceForge with the 'Mark as Private' option activated. F-02. I do not consider this to be a security vulnerability. There is a security gate: a plugin must be stored in the KeePass application directory (on Windows, this typically is a folder in 'C:\Program Files', which requires administrator...