Commit Graph

997 Commits

Author SHA1 Message Date
antelle 9ee1080240 fixed white screen on startup 2017-12-03 01:04:04 +01:00
antelle f8245fac62 up translations 2017-12-02 22:46:32 +01:00
antelle f886cf6ee2 skip signature validation for configured plugins 2017-12-02 22:31:18 +01:00
antelle 27a0d811be plugin signature validation 2017-12-02 21:20:19 +01:00
antelle 2aadc27db8 asar packaging 2017-12-02 20:38:13 +01:00
antelle fd11c3011e removed old texts 2017-12-02 16:45:16 +01:00
antelle 0f47430b8d fixed locking message texts 2017-12-02 16:31:29 +01:00
antelle 75ff0e4311 fixed official plugins display 2017-11-28 18:54:06 +01:00
antelle f390b690a7 fix #353: WebDAV file creation 2017-11-27 22:11:00 +01:00
antelle 33519c7c60 fixed double OAuth errors 2017-11-27 19:00:39 +01:00
antelle 4ec08bf50e fix #648: auto-type on subdomains 2017-11-26 22:49:57 +01:00
antelle 62cdb32423 onedrive Graph API 2017-11-26 21:43:36 +01:00
antelle 08fbb9bf79 fix #750: prevent undo at login 2017-11-26 21:00:45 +01:00
antelle 42bea50907 fix #467: don't remove spaces in custom fields 2017-11-26 20:52:00 +01:00
antelle 78fed18d75 fix 509: clear clipboard on exit 2017-11-26 20:44:53 +01:00
antelle 51cd1eea9a removed duplicated parameter 2017-11-26 20:34:32 +01:00
antelle 8f8fa6faa1 list google drive files 2017-11-26 20:34:14 +01:00
antelle 7568a59019 fix #665: draggable area fix 2017-11-26 19:30:14 +01:00
antelle db36cbaebb fix #686: disable click to open for canOpen=false 2017-11-26 19:21:16 +01:00
antelle fb12ce3a6a fix #707: fix discard changes 2017-11-26 19:13:48 +01:00
antelle b3cd56b9c4 fix #780: clear template group on deletion 2017-11-26 18:58:37 +01:00
antelle 7d13b49093 redesigned Dropbox chooser 2017-11-26 17:26:58 +01:00
antelle 577d23e212 fixed tip transition animation in safari 2017-11-26 13:35:43 +01:00
antelle 32dcb31085 support more memory in argon2 2017-11-14 22:46:23 +01:00
antelle 9d3b904988 fixed license links 2017-11-13 22:48:38 +01:00
antelle 078af21a01 fix #777: replaced favicon service url 2017-11-13 22:35:46 +01:00
antelle 15b8d8362d fix #733: safari icons 2017-11-11 19:40:07 +01:00
antelle 8eaa9c92fa fix #774: reset creation time for cloned entries 2017-11-06 18:59:59 +01:00
antelle ae57a5a65e fix #768: password can be hidden as other fields 2017-11-04 09:53:26 +01:00
antelle 360d3ac6f6 fix #770: show usernames in in entry list 2017-11-04 09:38:56 +01:00
antelle 8d523f7e85 fixed typos 2017-10-15 16:29:56 +02:00
antelle c3c60fd613 check params on xml import 2017-09-29 20:37:38 +02:00
antelle 49b999693c fixed error after importing bad xml 2017-09-29 20:35:35 +02:00
antelle 34f91ac3af fix #724: loading app config bug 2017-08-31 22:26:06 +02:00
antelle 954a38b8d8 Merge branch 'master' into develop 2017-08-31 21:30:20 +02:00
antelle c1decbcd5a fix #653: auto-closing tab when starting from link
(cherry picked from commit bcafbde)
2017-08-31 19:12:00 +02:00
antelle 9defd2476d fixed autocompletes in new chrome 2017-08-31 19:10:59 +02:00
antelle 7961d2a660 fixed config link check 2017-08-31 19:08:39 +02:00
antelle 1ac61799fe prevent keeweb from working in iframe 2017-08-31 18:56:11 +02:00
antelle 624755029f check config location 2017-08-30 19:14:42 +02:00
sainaen 9ff47971c7 Add rel=noreferrer to links in the URL field
When opened from the webapp, a malicious target page could trigger
navigation in the KeeWeb's tab using `window.opener`.

The proper way to fix this would be using `rel=noopener`, but
unfortunately even the latest versions of IE do not support it.
At the same time `rel=noreferrer`, for historical reasons, implies
`rel=noopener` when used with `target=blank` and is supported
by IE11 (in later versions of Windows 10) and Edge.

More details and examples of the attack
at [Mathias Bynens' website](https://mathiasbynens.github.io/rel-noopener/).
2017-08-30 19:13:58 +02:00
antelle b29615b5aa check config location 2017-08-30 18:52:54 +02:00
antelle afda7b630e fix #654: Chinese fonts 2017-08-06 16:22:53 +02:00
antelle 18a3a4450e Merge branch 'sainaen-imp-ext-links-sec' into develop 2017-07-24 23:20:46 +02:00
sainaen 7a99e42bde
Add rel=noreferrer to links in the URL field
When opened from the webapp, a malicious target page could trigger
navigation in the KeeWeb's tab using `window.opener`.

The proper way to fix this would be using `rel=noopener`, but
unfortunately even the latest versions of IE do not support it.
At the same time `rel=noreferrer`, for historical reasons, implies
`rel=noopener` when used with `target=blank` and is supported
by IE11 (in later versions of Windows 10) and Edge.

More details and examples of the attack
at [Mathias Bynens' website](https://mathiasbynens.github.io/rel-noopener/).
2017-07-24 23:50:42 +03:00
antelle 569c44f78c hide unsupported option 2017-06-12 21:07:09 +02:00
antelle 6163fa4ba8 fix #422: lock on mac lock 2017-06-12 21:02:16 +02:00
antelle 51d172c79a fixed auth popup message 2017-06-11 19:41:56 +02:00
antelle bee819cc98 show dropbox list errors 2017-06-11 19:35:18 +02:00
antelle 849b9b06a9 preview pem files 2017-06-11 12:14:41 +02:00