01zulfi 49252e66ce web: fix RCE via stored XSS in note html export (#9709) ...

* sandbox the export iframe
* escape fields when building html template

Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com>

2026-04-17 18:10:06 +05:00

..

clipper

mobile: fix clipper build path

2025-12-09 12:49:37 +05:00

common

common: guard against undefined backStack/forwardStack in TabSessionHistory (#9674)

2026-04-06 12:42:00 +05:00

core

web: fix RCE via stored XSS in note html export (#9709)

2026-04-17 18:10:06 +05:00

crypto

crypto: lazily import sodium

2025-12-03 19:15:31 +05:00

editor

mobile: fix configure toolbar do not render properly on adding/removing groups (#9699)

2026-04-14 22:46:41 +05:00

editor-mobile

mobile: remove restoring app state on app launch #6294 (#9586)

2026-04-06 11:20:30 +05:00

intl

web: fix time field not aligning in reminder dialog (#9202)

2026-04-15 12:49:22 +05:00

logger

global: get rid of nx

2025-10-08 08:42:00 +05:00

sodium

core: handle inbox item sync & decryption (#8733)

2025-10-13 14:02:32 +05:00

streamable-fs

core: add support for bulk delete files

2026-02-13 13:01:56 +05:00

theme

global: get rid of nx

2025-10-08 08:42:00 +05:00

ui

global: get rid of nx

2025-10-08 08:42:00 +05:00