01zulfi 49252e66ce web: fix RCE via stored XSS in note html export (#9709) ...

* sandbox the export iframe
* escape fields when building html template

Signed-off-by: 01zulfi <85733202+01zulfi@users.noreply.github.com>

2026-04-17 18:10:06 +05:00

..

assets

web: introduce new checkout dialog

2025-09-29 10:02:09 +05:00

common

web: fix RCE via stored XSS in note html export (#9709)

2026-04-17 18:10:06 +05:00

components

web: make dates text reactive to date format setting (#9707)

2026-04-16 12:42:10 +05:00

dialogs

web: fix time field not aligning in reminder dialog (#9202)

2026-04-15 12:49:22 +05:00

hooks

web: don't collapse nav bar if a menu is still open (#9588)

2026-03-26 23:44:52 +05:00

interfaces

Merge pull request #9301 from streetwriters/core/orphaned-attachment-cleanup

2026-02-25 12:53:17 +05:00

navigation

web: add support for direct navigation (via url) to setting sections

2025-10-21 14:42:37 +05:00

re-exports

web: new dialog based settings (#2745)

2023-06-16 19:10:02 +05:00

stores

web: fix all tabs closed on sync when any note is deleted from another device (#9252)

2026-04-06 23:02:12 +05:00

utils

desktop: disable update checker if auto updates off (#9302)

2026-03-13 09:16:57 +05:00

views

web: add clear trash option in trash nav item context menu

2026-04-15 12:48:10 +05:00

app-effects.tsx

web: disable automatic orphaned attachment removal

2026-03-12 09:34:04 +05:00

app.css

web: add option to preview attachments in attachment manager (#9186)

2026-01-16 13:00:14 +05:00

app.tsx

global: add support for expiring notes (#9167)

2026-01-16 10:55:40 +05:00

bootstrap.tsx

web: add logging about persistence type

2026-02-19 11:37:59 +05:00

global.d.ts

web: fix tests

2025-10-03 11:59:53 +05:00

index.html

web: introduce new checkout dialog

2025-09-29 10:02:09 +05:00

index.ts

web: fix tests

2025-04-10 10:28:58 +05:00

polyfills.ts

web: load polyfills before everything else

2023-06-17 13:36:01 +05:00

root.tsx

web: fix page state persistence on account recovery pages

2026-02-19 10:42:55 +05:00

service-worker-registration.ts

web: use service worker for cross-tab communication only as a fallback

2025-04-10 10:29:26 +05:00

service-worker.dev.ts

web: fix app not starting up on firefox

2025-04-10 10:28:58 +05:00

service-worker.ts

web: use separate service worker cache for each app version

2025-04-24 12:39:51 +05:00