Ammar Ahmed
0b1aa3315b
Merge branch 'master' into beta
2026-04-18 10:08:55 +05:00
01zulfi
49252e66ce
web: fix RCE via stored XSS in note html export ( #9709 )
...
* sandbox the export iframe
* escape fields when building html template
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-17 18:10:06 +05:00
Abdullah Atta
131f6c6d5f
Merge branch 'master' into beta
2026-04-15 08:10:24 +05:00
01zulfi
690c30eed3
web: show toast when vault is auto-locked or when timer is changed
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-14 12:44:26 +05:00
Chloe Oletto
3f0c24d27b
core: duplicating a note should copy all the flags ( #9250 )
...
Signed-off by: Chloe Oletto <NeedsChloesure@riseup.net >
2026-04-14 08:23:50 +05:00
Ammar Ahmed
e4f1f2bfa7
core: fix import
2026-04-13 11:43:33 +05:00
01zulfi
2b1cd537e2
web: add vault lock timer setting
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-13 11:40:34 +05:00
Abdullah Atta
f3ef277a52
Merge pull request #9643 from streetwriters/core/validate-inbox-items
...
core: validate & sanitize inbox items
2026-04-07 20:41:25 +05:00
Abdullah Atta
d30ec4a19d
core: make html validation more resilient
2026-04-07 20:34:39 +05:00
Ammar Ahmed
206157b68b
core: handle invalid html inputs
2026-04-07 12:02:23 +05:00
Abdullah Atta
9bd0f0ceb1
editor: fix minor issues
2026-04-06 23:19:19 +05:00
Ammar Ahmed
61a56662eb
core: make dom-purify mobile compatible
2026-04-06 14:29:41 +05:00
01zulfi
21f4b906d7
web: fix html entities shown in match result ( #9645 )
...
* web: fix non-breaking space shown as encoded in match result
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: decode matches in db.lookup.notesWithHighlighting
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: decode entities at parse time
---------
Co-authored-by: Abdullah Atta <abdullahatta@streetwriters.co >
2026-04-06 14:20:10 +05:00
01zulfi
faea6635c6
core: remove unnecessary note.spellcheck data migration
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-06 09:57:42 +05:00
01zulfi
e3ed75461e
web: spellcheck should be enabled by default for new notes && hide properties toggle if disabled on desktop
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-06 09:57:19 +05:00
01zulfi
f6b59eeb99
web: add support for toggling spellcheck per note
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-06 09:57:02 +05:00
Abdullah Atta
84655cec40
Merge pull request #9650 from streetwriters/fix-internal-links
...
Fix internal links
2026-04-06 09:25:29 +05:00
01zulfi
413ca61ef5
core: $headline$ format should get 60 chars from first p or h tag ( #9658 )
...
* core: note title headline format should get content from first p or h tag
* also decrease character limit to 60
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* Apply suggestion from @thecodrr
Signed-off-by: Abdullah Atta <thecodrr@protonmail.com >
---------
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
Signed-off-by: Abdullah Atta <thecodrr@protonmail.com >
Co-authored-by: Abdullah Atta <abdullahatta@streetwriters.co >
2026-04-06 09:20:21 +05:00
01zulfi
49b1dd46d1
core: add support for server controlled monograph urls ( #8995 )
...
* core: support monograph.publishUrl field
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: support monograph publish-info endpoint
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: pubilsh-info -> metadata
* monograph: add support for slug
* mobile: use monograph metadata to get publishUrl (#9628 )
Signed-off-by: sahil <sahil.aslam011@gmail.com >
* core: use v2 endpoint for publishing monographs
* monograph: separate route for v2 monographs
* core: fix monograph updates
---------
Signed-off-by: sahil <sahil.aslam011@gmail.com >
Co-authored-by: Abdullah Atta <abdullahatta@streetwriters.co >
Co-authored-by: SahilAslam001 <sahil.aslam011@gmail.com >
2026-04-06 09:15:15 +05:00
Ammar Ahmed
8d3d173762
core: db.notes.internalLinks() should only return note internal links
2026-04-03 13:00:51 +05:00
01zulfi
7b6165c8f0
core: validate & sanitize inbox items
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-04-02 13:26:36 +05:00
Ammar Ahmed
c90a2f5179
Merge branch 'master' into beta
2026-04-02 13:07:58 +05:00
01zulfi
539950bdc5
core: perform fuzzy search again if query contains non-alphanumeric chars ( #9634 )
...
* core: simplify fuzzy separator regex
* remove lookahead and lookbehind
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: do 2 pass fuzzy search if query contains non-alphanumeric chars
---------
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
Co-authored-by: Abdullah Atta <abdullahatta@streetwriters.co >
2026-04-02 12:13:06 +05:00
Abdullah Atta
6a843a6457
core: fix getInboxKeys
2026-03-31 13:31:37 +05:00
01zulfi
561477fb1a
web: use pgp keys for inbox
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-03-31 13:30:48 +05:00
Abdullah Atta
b46e02753a
Merge pull request #9378 from streetwriters/desktop/handle-nn-protocol
...
Add handler for nn:// urls
2026-03-30 12:07:42 +05:00
Abdullah Atta
24fca08fdc
core: generate all user keys on sign up ( #9600 )
2026-03-28 09:20:53 +05:00
01zulfi
91077dc132
core: fix ciphertext cannot be decrypted... error on attachment upload after sign up ( #9596 )
...
* core: fix attachment upload on new user signup
* multiple attachment keys were being created because null cache was set in the key manager, a check is added so only defined key values are set in cache
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: use `cache.get` instead of `cache.has` for checking key existence
---------
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
Co-authored-by: Abdullah Atta <abdullahatta@streetwriters.co >
2026-03-28 00:21:02 +05:00
01zulfi
9628a940e9
core: normalize special separators in fuzzy search ( #9541 )
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-03-24 09:50:27 +05:00
Abdullah Atta
e94c757d5b
desktop: add handler for nn:// urls
2026-03-18 11:39:26 +05:00
01zulfi
20a3b3b95e
core: fix diacritics not getting ignored in search ( #9479 )
...
* core: fix diacritics search in db.lookup.notesWithHighlighting
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: remove diacritic in transformTokens
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
* core: remove redundant `textContainsTokens` check
* core: fix wrong edge case handling
* core: create & use highlightRegexMatches
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
---------
Co-authored-by: Abdullah Atta <abdullahatta@streetwriters.co >
2026-03-18 11:24:13 +05:00
01zulfi
95a9775c26
core: fix crash because of bracket in note search query ( #9477 )
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-03-13 09:18:53 +05:00
Ammar Ahmed
4cea69e71d
core: remove group from queueDownloads when in progress
2026-02-26 10:34:04 +05:00
Ammar Ahmed
04d422b411
core: fix audio attachments not linked to note when attached
2026-02-26 10:32:17 +05:00
Abdullah Atta
aa769a8921
Merge pull request #9301 from streetwriters/core/orphaned-attachment-cleanup
...
core: remove orphaned attachments in trash cleanup method
2026-02-25 12:53:17 +05:00
Abdullah Atta
f2402cf086
web: remove orphaned attachments on app launch
2026-02-25 11:24:31 +05:00
Abdullah Atta
5d922d934c
Merge branch 'master' into beta
2026-02-21 10:36:37 +05:00
Ammar Ahmed
7da168ab52
Merge pull request #9307 from streetwriters/fix-offline-mode-cache-attachments
...
mobile: fix switching app from background to foreground starts a new attachment cache download group
2026-02-20 08:12:57 +05:00
Abdullah Atta
20d9bf1f23
core: ensure user is fetched after sign up
2026-02-19 10:42:55 +05:00
Ammar Ahmed
fe143f66b7
core: remove log
2026-02-16 15:04:05 +05:00
Ammar Ahmed
c52779df23
Merge branch 'master' into beta
2026-02-16 14:40:45 +05:00
Abdullah Atta
702e28a6e6
Merge pull request #9323 from streetwriters/fix/password-changing
...
Fix account password changing
2026-02-16 14:15:39 +05:00
Ammar Ahmed
d3c9744e65
core: use db event manager
2026-02-16 13:11:45 +05:00
Abdullah Atta
91cbc5ddf0
core: simplify user signup
2026-02-16 13:06:58 +05:00
01zulfi
0aeea965c0
core: add support for bulk delete files
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-02-13 13:01:56 +05:00
Abdullah Atta
a63b15637f
core: fix types
2026-02-13 11:33:09 +05:00
Ammar Ahmed
9ea7d09722
core: fix imports
2026-02-13 09:45:08 +05:00
01zulfi
b7b474b245
core: fix archived notes not showing in attachment's linked notes ( #9001 )
...
Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com >
2026-02-12 14:19:59 +05:00
Abdullah Atta
122c3a96c7
web: fix account recovery
2026-02-09 12:27:36 +05:00
Abdullah Atta
8c766ef4f0
core: add initial DEK support
2026-02-09 11:07:53 +05:00