dependabot[bot]
7057c216fd
chore(deps): bump minimatch in /js
...
Bumps and [minimatch](https://github.com/isaacs/minimatch ). These dependencies needed to be updated together.
Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
Updates `minimatch` from 9.0.6 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
- dependency-name: minimatch
dependency-version: 9.0.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-28 04:28:46 +00:00
rugk
32ab4dade5
Merge pull request #1790 from PrivateBin/devcontainer/phpunit
...
fix(devcontainer): try making VSCode test extension work (PHPUnit/Mocha)
2026-02-25 09:50:27 +01:00
rugk
d874ea71a2
test: fix tests
2026-02-24 12:06:46 +00:00
rugk
1cc811644f
docs: improve JSDoc
2026-02-23 16:00:31 +00:00
rugk
5fd974e247
style: fix/remove trailing comma
2026-02-23 16:00:22 +00:00
rugk
30f80d055b
wipfix: fix JS syntax errors
2026-02-23 15:54:56 +00:00
rugk
5dab2392b9
Merge branch 'master' into xss/jsImprove
2026-02-23 16:48:21 +01:00
rugk
69e37c2c04
refactor: introduce purifyHtmlConfigStrictSubset
2026-02-23 16:45:31 +01:00
rugk
dcaa019599
refactor: use modern spread syntax for combining object
...
Given it's 2026 this really should be supported by all browsers now: https://caniuse.com/mdn-javascript_operators_spread,mdn-javascript_operators_spread_spread_in_arrays,mdn-javascript_operators_spread_spread_in_function_calls,mdn-javascript_operators_spread_spread_in_object_literals
2026-02-23 16:36:46 +01:00
rugk
7e506c7f83
refactor: drastically simplify JS "has HTML" extension again
...
Co-authored-by: El RIDO <elrido@gmx.net >
2026-02-23 16:31:13 +01:00
rugk
35a593723d
test: record/install mocha & nyc in package.json
2026-02-23 15:00:42 +00:00
Stephan Kristyn
5d22847ef1
ES6 Compat code broke everything. Reverting. E2E testing wth multiple files works
2026-02-12 13:48:49 +01:00
Stephan Kristyn
cfea0fb20e
Now leaving styling to customer if he wants the filename and filesize as a hyperlink or outside the hyperlink
2026-02-11 19:03:34 +01:00
Stephan Kristyn
755be747a6
Refactoring the way DOM element is created and styled. Now leaving styling to customer
2026-02-11 18:41:44 +01:00
Stephan Kristyn
9ab16674aa
Adding Bootstrap Classname to dynamically created child element
2026-02-10 18:22:17 +01:00
Stephan Kristyn
e2b4b8a7f8
Adding new DOM element, CSS and JS code
2026-02-10 14:36:03 +01:00
El RIDO
ec656a5456
credit Persian translation & enable use of Persian plurals
2026-02-06 19:15:02 +01:00
Ali Fani
6a0fd6fb44
Add Persian (fa) language support and update supported languages list
2026-02-06 11:23:14 +03:30
El RIDO
360b46123d
Merge pull request #1761 from PrivateBin/linter-unused-variable
...
address unused variable lint
2026-01-30 22:15:08 +01:00
El RIDO
a1c8966a36
Merge branch 'master' into linter-semicolon-insertion
2026-01-28 07:33:58 +01:00
El RIDO
b36edf5a72
Merge pull request #1759 from cloudscape-germany/feature/exhaustive-bot-list
...
Feature/exhaustive bot list
2026-01-28 07:15:49 +01:00
Cloudscape Germany
0d24bac155
Update js/legacy.js
...
Co-authored-by: El RIDO <elrido@gmx.net >
2026-01-27 14:50:23 +01:00
Cloudscape Germany
4711d9135a
Remove monitoring services from legacy.js
...
Removed monitoring and uptime services from the list.
2026-01-25 21:10:36 +01:00
Cloudscape Germany
9c40afbdf3
Update js/legacy.js
...
Co-authored-by: El RIDO <elrido@gmx.net >
2026-01-25 21:06:23 +01:00
Cloudscape Germany
3b543d3271
Update js/legacy.js
...
Co-authored-by: El RIDO <elrido@gmx.net >
2026-01-25 21:04:38 +01:00
Cloudscape Germany
885ad4ff70
Update js/legacy.js
...
Co-authored-by: El RIDO <elrido@gmx.net >
2026-01-25 21:03:51 +01:00
Cloudscape Germany
0f4ac5e98e
Update js/legacy.js
...
Co-authored-by: El RIDO <elrido@gmx.net >
2026-01-25 20:58:24 +01:00
El RIDO
72e8ffe368
address unused variable lint
...
See: https://github.com/PrivateBin/PrivateBin/security/quality/rules/js%2Funused-local-variable
2026-01-25 10:00:14 +01:00
El RIDO
a4eaa77b82
address semicolon insertion lint
...
> Code that uses automatic semicolon insertion inconsistently is hard to read and maintain.
See: https://github.com/PrivateBin/PrivateBin/security/quality/rules/js%2Fautomatic-semicolon-insertion
2026-01-25 09:41:52 +01:00
El RIDO
0ed48c455f
address unneeded defensive code lint
...
IMHO this check is actually necessary, as we do call the function with an empty argument. So we need a guard there, but we could simplify it a bit, by making the argument an empty array by default. I still kept the check for undefined (line 3249, first check) in case the caller passes us an undefined variable.
See: https://github.com/PrivateBin/PrivateBin/security/quality/rules/js%2Funneeded-defensive-code - Copilot suggested to simply remove the if-condition and its else block, which I think is wrong.
2026-01-25 09:26:14 +01:00
Cloudscape Germany
968ec9cada
Fix JSDoc type for badBotUA variable
...
Update JSDoc type annotation for badBotUA variable
2026-01-24 12:55:59 +01:00
Cloudscape Germany
15643689fd
Add exhaustive list of bot identifiers to badBotUA array
...
- Minimizes false positives by using specific patterns like 'bot/', '-bot'
- Catches most bot variants without being overly broad
- Maintains case-sensitivity for precision
- Includes both common patterns and specific known bots
2026-01-24 12:40:44 +01:00
Ribas160
b1f57bddd1
Fix eslint errors
2025-12-14 09:18:56 +02:00
Ribas160
ed9b3d1aa0
fix: The content format is not reset on create a new or clone document
2025-12-14 09:08:48 +02:00
Ribas160
54d002d26f
fix: Attachment disappears after a "paste" in the message area
2025-12-09 15:43:59 +02:00
El RIDO
aa931c7a5c
enable Swedish translations
2025-12-02 06:40:07 +01:00
dependabot[bot]
f4f655966c
Bump js-yaml from 4.1.0 to 4.1.1 in /js
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-15 10:37:12 +00:00
rugk
ad55131831
refactor: use given HTML config for DOMPurify
2025-11-15 09:57:39 +00:00
rugk
f6893d338b
refactor: use DOMParser for checking if translation is HTML
2025-11-13 13:34:51 +00:00
El RIDO
19ca6d3dab
incrementing version
2025-11-12 08:00:50 +01:00
El RIDO
e427458cd0
Merge branch 'master' into advisory-fix-1
2025-11-11 22:00:09 +01:00
Mikhail Romanov
ff5aee85b4
Insert file names as break-separated text nodes
...
Co-authored-by: El RIDO <elrido@gmx.net >
2025-11-11 20:05:32 +02:00
Ribas160
9c71fbcc70
Use pure JavaScript to create a div element
2025-11-11 17:45:27 +02:00
Ribas160
14b68af528
Insert drag and drop file names as a text, not html
2025-11-10 17:59:18 +02:00
Ribas160
a7b253a43a
fix: error fetching attachments from blob
2025-11-05 17:33:08 +02:00
El RIDO
a91d0afebd
ensure there is still a space between commenter icon and name
2025-10-28 16:35:58 +01:00
El RIDO
2f70456e9a
incrementing version
2025-10-28 16:08:13 +01:00
El RIDO
8293d1fb5d
apply ESLint recommendation
2025-10-28 11:33:47 +01:00
El RIDO
43cf8b53ac
Merge branch 'master' into purify-3.3.0
2025-10-28 11:27:17 +01:00
El RIDO
c4f8482b30
Refactored jQuery DOM element creation
...
using plain JavaScript, to ensure text nodes are sanitized
2025-10-25 12:56:55 +02:00