1
0
mirror of https://github.com/keeweb/keeweb.git synced 2024-06-29 08:00:53 +02:00
Commit Graph

1104 Commits

Author SHA1 Message Date
antelle
18a3a4450e Merge branch 'sainaen-imp-ext-links-sec' into develop 2017-07-24 23:20:46 +02:00
sainaen
7a99e42bde
Add rel=noreferrer to links in the URL field
When opened from the webapp, a malicious target page could trigger
navigation in the KeeWeb's tab using `window.opener`.

The proper way to fix this would be using `rel=noopener`, but
unfortunately even the latest versions of IE do not support it.
At the same time `rel=noreferrer`, for historical reasons, implies
`rel=noopener` when used with `target=blank` and is supported
by IE11 (in later versions of Windows 10) and Edge.

More details and examples of the attack
at [Mathias Bynens' website](https://mathiasbynens.github.io/rel-noopener/).
2017-07-24 23:50:42 +03:00
antelle
569c44f78c hide unsupported option 2017-06-12 21:07:09 +02:00
antelle
6163fa4ba8 fix #422: lock on mac lock 2017-06-12 21:02:16 +02:00
antelle
51d172c79a fixed auth popup message 2017-06-11 19:41:56 +02:00
antelle
bee819cc98 show dropbox list errors 2017-06-11 19:35:18 +02:00
antelle
849b9b06a9 preview pem files 2017-06-11 12:14:41 +02:00
antelle
d02a4671cb fix #656: prevent master password autocomplete 2017-06-07 19:31:06 +02:00
antelle
087dd6cae0 eslint 2017-06-06 20:42:25 +02:00
antelle
31f5f2d88a plugin signature validation 2017-06-06 20:40:27 +02:00
antelle
c86042b885 local resource signature validation 2017-06-06 19:55:46 +02:00
antelle
9ba645cb81 added Microsoft YaHei font 2017-06-05 14:45:10 +02:00
antelle
f4d5e51983 override userData path for desktop 2017-06-05 13:33:12 +02:00
antelle
41656b76b6 save plugin gallery in desktop 2017-06-05 11:48:03 +02:00
antelle
2efb2911b1 fix chown typo 2017-06-05 11:32:18 +02:00
antelle
857593232c set app folder permissions to root on mac 2017-06-05 11:31:50 +02:00
antelle
e5bfa59c50 fix #422: better lock or sleep message 2017-06-03 21:09:03 +02:00
antelle
bcafbde0d6 fix #653: auto-closing tab when starting from link 2017-06-03 20:11:09 +02:00
antelle
ade2d77662 fix #652: create a copy bug 2017-06-03 16:22:02 +02:00
antelle
818e547572 fix window drag style 2017-06-03 16:21:12 +02:00
antelle
f083e50fad fix #649: loading keyfiles with path 2017-06-03 16:21:03 +02:00
antelle
338414f6af fix #645: layout issues while switching table view 2017-06-03 16:20:54 +02:00
antelle
80c396bb48 fix #652: create a copy bug 2017-06-03 16:14:03 +02:00
antelle
fc629a7760 fix window drag style 2017-06-02 22:28:18 +02:00
antelle
65a47a8fe4 lock on computer sleep 2017-06-02 20:16:09 +02:00
antelle
bb8e3390a0 auto-lock when Windows is locked 2017-06-02 20:04:57 +02:00
antelle
f8f81ae07f fix #649: loading keyfiles with path 2017-06-01 21:35:56 +02:00
antelle
9918b63a4c fix #645: layout issues while switching table view 2017-05-29 23:46:36 +02:00
antelle
a3af54cefc translations 2017-05-29 20:47:19 +02:00
antelle
c51cf1d9b2 more edge hacks 2017-05-28 21:24:48 +02:00
antelle
a39b4e63a1 refactor selfhosted app detection 2017-05-28 17:30:00 +02:00
antelle
196bb3385b fix #644: plugin gallery load button 2017-05-28 17:03:10 +02:00
antelle
6deab5f022 don't test localStorage on electron 2017-05-27 22:15:49 +02:00
antelle
ff6fc99920 hide password auto-fill in Safari 2017-05-27 18:11:38 +02:00
antelle
c5f3e75ae5 fixed dropdowns in Edge 2017-05-27 00:15:00 +02:00
antelle
15449602b2 added links to edge hacks 2017-05-26 19:26:21 +02:00
antelle
99ef3f2b43 fix #636: workaround to make clicks work in Edge 14 2017-05-26 19:18:22 +02:00
antelle
bacb65b584 fix #641: fixed mac app layout issues with custom titlebar styles 2017-05-26 18:57:45 +02:00
antelle
4634281870 fix #636: broken layout in edge 15 2017-05-25 21:37:04 +02:00
antelle
eafc81c938 fix #638: password generator drag issues 2017-05-25 20:24:20 +02:00
antelle
2af53d108b fix plugin version parsing 2017-05-25 19:41:06 +02:00
antelle
d66bfb4cab - fix #633: template ids issues 2017-05-24 23:02:19 +02:00
antelle
c07484fb3d translation 2017-05-23 21:11:15 +02:00
antelle
ea0f612747 plugin manifest fields: versionMin, versionMax, desktop 2017-05-23 20:03:29 +02:00
antelle
1810480cf2 fix backups in desktop 2017-05-23 18:30:17 +02:00
antelle
9569716e96 kw.settings.del method 2017-05-22 22:19:42 +02:00
antelle
37110d75cf hide desktop-only plugins 2017-05-22 22:03:22 +02:00
antelle
174c205d7a expose AppModel.instance for plugins 2017-05-22 21:59:01 +02:00
antelle
145aa4bac4 fix #631: unicode characters in Dropbox files 2017-05-22 21:50:28 +02:00
antelle
245662a941 check for WebCrypto during startup 2017-05-21 18:13:07 +02:00
antelle
7359c4ee50 languages 2017-05-20 18:55:04 +02:00
antelle
2526d64148 enforce theme selector rules 2017-05-20 13:11:31 +02:00
antelle
646550cc4e trim unused css 2017-05-20 12:49:09 +02:00
antelle
8f24cfff11 decrease auto-update timeout 2017-05-20 12:46:48 +02:00
antelle
1e84c48213 auto-updating plugins 2017-05-20 12:46:21 +02:00
antelle
04013a67a4 removed debug code 2017-05-20 11:27:40 +02:00
antelle
a219d4254c auto-update plugins checkbox 2017-05-20 11:27:28 +02:00
antelle
11dc8bef67 special A key handling, fixed all inputs 2017-05-19 23:57:49 +02:00
antelle
13519a3d5d fix arrows error 2017-05-19 23:36:31 +02:00
antelle
a8e6f95dac uncommented code 2017-05-19 22:14:53 +02:00
antelle
5bfce6c871 plugin settings 2017-05-19 22:05:35 +02:00
antelle
a131d7435c translations 2017-05-18 22:52:13 +02:00
antelle
320c5cb7da removed unused code 2017-05-17 22:45:18 +02:00
antelle
7c7e8f5900 removed utility from libraries 2017-05-17 22:41:12 +02:00
antelle
8c7b4e07b7 languages 2017-05-17 22:15:25 +02:00
antelle
49bfcc6994 fix #628: merge errors 2017-05-17 20:32:46 +02:00
antelle
a006b0f5fc plugin link 2017-05-17 20:06:44 +02:00
antelle
f59c4970c9 plugin dev and translation links 2017-05-17 19:25:08 +02:00
antelle
d4721664bf translations 2017-05-17 18:50:28 +02:00
antelle
61e6536d02 fancy not supported message 2017-05-16 22:56:52 +02:00
antelle
cb0f81840a better plugin install page 2017-05-16 22:28:29 +02:00
antelle
16a90ccf08 removed redundant escape 2017-05-16 21:29:24 +02:00
antelle
fa14998d8d fix oauth popups 2017-05-16 21:26:42 +02:00
antelle
7d86e8323c loading plugins from config 2017-05-16 21:26:25 +02:00
antelle
d01e06349f don't show backups if there's no suitable provider 2017-05-15 22:27:01 +02:00
antelle
371afa38ff removed mscrypto 2017-05-14 23:30:13 +02:00
antelle
aabd460bf5 hide unicode flags on windows 2017-05-14 21:23:49 +02:00
antelle
8072c3f028 fixed styles in edge 2017-05-14 21:17:10 +02:00
antelle
38a6d69dde fix plugin disable 2017-05-14 18:38:35 +02:00
antelle
af2de71e5d check plugins public keys 2017-05-14 17:14:21 +02:00
antelle
fae40c8c3e more error handling 2017-05-14 17:04:14 +02:00
antelle
f1fdfffd5a support plugins in safari 10.1 2017-05-14 16:58:42 +02:00
antelle
05c92b2266 plugin search 2017-05-14 13:13:09 +02:00
antelle
4a99ead4b4 removed old code 2017-05-14 12:04:13 +02:00
antelle
43dc8ff59d refactored similar code 2017-05-14 00:24:06 +02:00
antelle
930596f243 hide installed plugins 2017-05-13 23:57:09 +02:00
antelle
70dc9a64ce plugin styles 2017-05-13 22:57:06 +02:00
antelle
14755294b2 plugin install progress button 2017-05-13 22:53:45 +02:00
antelle
f602f64c66 fix eslint 2017-05-13 22:36:49 +02:00
antelle
4664979e8d plugin gallery 2017-05-13 22:36:07 +02:00
antelle
9275c7802e print plugin update date 2017-05-13 14:00:03 +02:00
antelle
4bf147c939 fix noscript message 2017-05-13 13:38:34 +02:00
antelle
06dcfcb2cb fix donation link 2017-05-12 18:43:04 +02:00
antelle
fac7c41275 fix 559: show all entries on auto-type 2017-05-07 19:45:53 +02:00
antelle
0fadcf564a fix #527: error syncing file from filesystem to gdrive 2017-05-07 19:05:29 +02:00
antelle
7ef2dba018 fix #582: auto-type custom fields with spaces 2017-05-06 19:28:22 +02:00
antelle
158dba9df2 user-friendly message 2017-05-05 23:23:42 +02:00
antelle
56a07ad0e7 open plugins from languages 2017-05-05 20:41:45 +02:00
antelle
9f87d8fe49 fix 2017-05-05 20:27:52 +02:00
antelle
68a07855de top locales: de, fr 2017-05-05 20:27:06 +02:00
antelle
3662a67de3 entry templates fields 2017-05-03 21:21:29 +02:00
antelle
6930b23ad9 create entry templates 2017-05-03 20:44:16 +02:00
antelle
a4cdb37594 fix button styles 2017-05-02 21:27:07 +02:00
antelle
0bb7602bf8 fix #112: entry templates 2017-05-02 21:22:08 +02:00
antelle
5f2eea2c29 better config error handling 2017-05-01 21:19:43 +02:00
antelle
1195408b1d button in settings 2017-04-29 18:57:18 +02:00
antelle
4a6ec85ab5 fix plugin install 2017-04-27 23:49:32 +02:00
antelle
fd96ecfd43 plugins page 2017-04-27 14:50:36 +02:00
antelle
c4adde0560 set css plugin theme properties 2017-04-27 12:02:41 +02:00
antelle
a9e51b75ee fix plugin install 2017-04-27 10:24:36 +02:00
antelle
afe0dabc5c removed form-box-shadow-color from theme variables 2017-04-27 09:47:28 +02:00
antelle
995f13c60f extracted theme vars scss 2017-04-27 09:40:18 +02:00
antelle
1618ff0109 removed extra variable 2017-04-27 08:12:32 +02:00
antelle
0a873ac9c8 fix window style setting 2017-04-26 22:38:01 +02:00
antelle
7327487cfd fix transparent color name 2017-04-26 22:25:48 +02:00
antelle
10d2ef808f fix transparent color name 2017-04-26 22:24:48 +02:00
antelle
d6bda901c1 fix transparent color name 2017-04-26 22:24:08 +02:00
antelle
499cd675a0 bugfixes; plugin sorting 2017-04-26 22:12:41 +02:00
antelle
f8bfa8b7db fix jshint 2017-04-26 22:07:48 +02:00
antelle
4433654686 fix #609: enable/disable plugins 2017-04-26 22:06:07 +02:00
antelle
09a7ee1642 removed old file 2017-04-24 23:54:00 +02:00
antelle
354ebe626b theming with css variables 2017-04-24 23:52:48 +02:00
antelle
9067eee63b fix 2017-04-18 19:32:01 +02:00
antelle
9f21842a68 variables for url parts 2017-04-18 19:24:17 +02:00
antelle
ef44bd95d7 fix #602: treat www, wwws and secure as the same domain 2017-04-18 19:05:27 +02:00
antelle
e210e42e63 wording 2017-04-16 21:30:18 +02:00
antelle
b452c9c837 fix #514: save to WebDAV with PUT 2017-04-16 21:23:18 +02:00
antelle
9e16a8dac3 remove unused code 2017-04-16 21:09:17 +02:00
antelle
e1d798917f use flexbox without vendor-prefixes 2017-04-16 18:37:16 +02:00
antelle
85d4f9797d fix #298: support cloud storages in iOS homescreen apps 2017-04-16 18:05:58 +02:00
antelle
312545cf08 removed unused code 2017-04-16 17:24:58 +02:00
antelle
8cac1b8cdd Dropbox V2 API endpoints 2017-04-16 17:00:35 +02:00
antelle
8ee596b067 fix mobile bugs 2017-04-16 12:15:53 +02:00
antelle
0c42629f32 fix clicks 2017-04-16 11:57:25 +02:00
antelle
b771170144 fix clicks on labels 2017-04-16 11:56:06 +02:00
antelle
a45ec36d21 fix mobile tips 2017-04-16 11:53:14 +02:00
antelle
aa7a7415df hide copy tip on edit 2017-04-16 10:19:46 +02:00
antelle
6fb745bbc3 metter mobile buttons 2017-04-16 10:05:55 +02:00
antelle
fe47201643 prevent buttons select 2017-04-16 09:19:11 +02:00
antelle
67520a35ba fix #583: reduced mobile footer icons density 2017-04-16 00:01:07 +02:00
antelle
769ba1c12b mobile field editing improvements 2017-04-15 23:26:52 +02:00
antelle
9c0528e711 log strings 2017-04-15 20:34:58 +02:00
antelle
c2660c318b better log view 2017-04-15 20:32:43 +02:00
antelle
88ad83ac37 load webassembly in web worker 2017-04-15 20:14:57 +02:00
antelle
c94cacb14c removed support of devices without clipboard api 2017-04-15 16:57:37 +02:00
antelle
04f2548a22 Merge branch 'alex-shpak-cordova' into develop 2017-04-14 23:22:33 +02:00
antelle
55eb63d651 Merge branch 'cordova' of https://github.com/alex-shpak/keeweb into alex-shpak-cordova 2017-04-14 22:17:25 +02:00
Alex Shpak
945a902071 Fixed some PR comments 2017-04-12 00:06:44 +02:00
antelle
4ee3bb4e23 removed all translations 2017-04-11 18:58:44 +02:00
antelle
87549c0d13 Merge branch 'lock-after-auto-type' of https://github.com/lawrencium/keeweb into lawrencium-lock-after-auto-type 2017-04-11 18:41:03 +02:00
Alex Shpak
12603ff2ab Removing duplicate joinPath 2017-04-11 01:34:59 +02:00
Alex Shpak
17c0bd7b25 Fix file chooser error message 2017-04-11 01:03:31 +02:00
Alex Shpak
03302428e7 Removed mobiel css 2017-04-11 01:03:31 +02:00
Alex Shpak
1b6ecd1e70 Cordova launcher formatting 2017-04-11 01:03:31 +02:00
Alex Shpak
ad246ba180 Fixed aligned launcher methods 2017-04-11 01:03:31 +02:00
Alex Shpak
c799574aee Remove cloud drives from cordova 2017-04-11 01:03:31 +02:00
Alex Shpak
0e2b1386ec Implementing mkdir and other improvements 2017-04-11 01:03:31 +02:00
Alex Shpak
ac723b7ef5 Added cordova calls 2017-04-11 01:03:31 +02:00
Alex Shpak
159d08d6c2 added fingerprint hooks 2017-04-11 01:03:31 +02:00
antelle
0820394e50 fix plugin url 2017-04-10 20:51:31 +02:00
lawrencium
1ffdf2b438 code changes per @antelle's review 2017-04-09 01:31:05 -07:00
antelle
3db55f7657 fixed plugin update errors 2017-04-09 09:32:05 +02:00
lawrencium
fe7ccf93d6 have statFileSync() return something since the caller checks the file stats 2017-04-08 16:10:53 -07:00
lawrencium
b0288b8815 added option to auto-lock database after an auto-type action is performed 2017-04-08 15:53:12 -07:00
antelle
c084746b3e updating plugins 2017-04-08 23:35:26 +02:00
antelle
782488f8fa removed 'use script' 2017-04-08 18:31:38 +02:00
antelle
70cbcb5c36 desktop plugins 2017-04-08 17:34:27 +02:00
antelle
c8fa6a7ac5 Merge branch 'EnricoMonese-ui' into develop 2017-03-28 20:08:14 +02:00
antelle
2b7e007199 Merge branch 'ui' of https://github.com/EnricoMonese/keeweb into EnricoMonese-ui 2017-03-28 19:28:11 +02:00
Enrico Monese
eac53175bf Reduce menu padding transition duration 2017-03-28 18:43:25 +02:00
Enrico Monese
a0ca1238f3 Add transition to menu top padding 2017-03-28 18:17:43 +02:00
Enrico Monese
cc250b441b Add missing parenthesis to supportsTitleBarStyle function call 2017-03-26 17:02:30 +02:00
Enrico Monese
aec6129041 Move platform check to FeatureDetector 2017-03-26 16:46:26 +02:00
Enrico Monese
ff65ef6cc6 Only display titlebar style setting on macOS 2017-03-26 16:36:07 +02:00
Enrico Monese
978c9e06ce Change draggable regions depending on titlebar style 2017-03-26 16:14:28 +02:00
Enrico Monese
79452441ca Correct layout when entering and leaving fullscreen 2017-03-26 15:24:14 +02:00
Enrico Monese
6d622ff2c2 Fix titlebar-style-hidden padding amount 2017-03-26 15:22:29 +02:00
antelle
55c224dff6 fix #555: keyfile selection issue 2017-03-26 11:15:36 +02:00
Enrico Monese
165efc1192 Fix menu layout for title styles 2017-03-26 03:42:21 +02:00
Enrico Monese
7330d87b6b Move up titlebar style setting 2017-03-26 01:59:26 +01:00
Enrico Monese
91286fd7a9 Finalize titlebar style setting 2017-03-26 01:57:52 +01:00
Enrico Monese
b4a5b24ef2 Add dropdown for titlebar style in general settings 2017-03-25 21:31:12 +01:00
Enrico Monese
632f0ca31f Fix webkit drag area preventing some other dragging functionality 2017-03-25 18:58:33 +01:00
Enrico Monese
d8c522fadd Fix layout to not overlap with inset title bar 2017-03-25 18:57:03 +01:00
Enrico Monese
08d46b1bef Make window draggable everywhere
Make window draggable everywhere with -webkit-app-region:drag
2017-03-25 16:48:14 +01:00
antelle
046a78e32b fix #552: update google drive icon 2017-03-06 20:57:42 +01:00
antelle
e459b8ef7b theme plugins 2017-02-21 22:05:18 +01:00
antelle
06e2491248 fixed storage-file error handling 2017-02-21 20:02:39 +01:00
antelle
7f9a6a31b7 fixed storage-file-cache logging and callbacks 2017-02-21 19:55:50 +01:00
antelle
a102a5877c fixed callback consistency in mdkir 2017-02-21 19:44:45 +01:00
antelle
adcf3c5377 Merge branch 'alex-shpak-develop' into develop 2017-02-20 23:39:13 +01:00
antelle
1438ae5642 Merge branch 'alex-shpak-develop' into develop 2017-02-20 23:38:52 +01:00
antelle
5082fbf5fc prevent plugin caching 2017-02-19 20:38:53 +01:00
antelle
04cd5c7456 fix locale plugins uninstall 2017-02-19 20:35:06 +01:00
antelle
14a045bf2a startup time logging 2017-02-19 20:19:03 +01:00
antelle
8e36237d2f removed extra logging line 2017-02-19 20:09:09 +01:00
antelle
b78457f356 plugin load times display 2017-02-19 19:30:59 +01:00
antelle
1ee89da0b5 fix plugin uninstall 2017-02-19 19:14:09 +01:00
antelle
35d74033fd loading saved plugins 2017-02-19 18:51:52 +01:00
antelle
664e7c50ae fixed plugin installation error 2017-02-19 15:57:41 +01:00