Ribas160
233e3e2399
Merge remote-tracking branch 'upstream/master' into os-copy-hotkey
...
# Conflicts:
# i18n/zh.json
# lib/Configuration.php
2026-06-19 20:03:38 +03:00
Ribas160
2219039a0a
feat: add i18n keys for Cmd and Ctrl keyboard labels
2026-06-19 19:58:29 +03:00
Ribas160
5d946c52a7
feat: Show OS-specific copy hotkey hint
2026-05-27 00:28:32 +03:00
“Sebastian
11d62b6cd4
fix(a11y): focus modals on open and update privatebin.js SRI
...
- Load-confirm modal: focus primary action on show
- Email-confirm modal: focus UTC button on show (safer default)
- Update SRI for js/privatebin.js in Configuration.php
Fixes #1801
2026-05-22 16:33:14 -04:00
Ribas160
848d80a3b2
Merge remote-tracking branch 'upstream/master' into copy_button_is_hidden
...
# Conflicts:
# lib/Configuration.php
2026-05-21 13:01:29 +03:00
Mikhail Romanov
b75dfdea42
Format code, kudos @elrido
...
Co-authored-by: El RIDO <elrido@gmx.net>
2026-05-16 12:31:32 +03:00
Ribas160
23e718e137
Merge remote-tracking branch 'upstream/master' into bug_in_attachment_functionality
...
# Conflicts:
# lib/Configuration.php
2026-05-16 12:26:09 +03:00
Ribas160
ca23d88cd9
Merge remote-tracking branch 'upstream/master' into copy_button_is_hidden
...
# Conflicts:
# lib/Configuration.php
2026-05-16 12:22:20 +03:00
El RIDO
72c64dac2c
remove redundant array
...
redundant, since .map always returns an array
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/map#return_value
Co-authored-by: Mikhail Romanov <42250412+Ribas160@users.noreply.github.com>
2026-05-16 08:42:31 +02:00
Ribas160
6d1d8da4a4
fix: state corruption after removing attachment
2026-05-15 15:33:52 +03:00
Ribas160
5bbe713b9c
fix: move copy to clipboard button outside of prettymessage block
2026-05-15 13:28:34 +03:00
El RIDO
a4bad44334
update dev dependencies, address ESlint error
...
null coalescing operator is only available as of ES2020, if we make it an array an or might do
2026-05-14 14:43:51 +02:00
El RIDO
14c8b2fa25
fix syntaxhighlighting format, requires non-strict DOMpurify
...
the strict settings removed the pre-tags, lists, etc. that are used by the prettify library to format source code
2026-05-03 08:49:43 +02:00
El RIDO
ebadfe43ec
chore: fix typo, update SRI hash and docs
2026-04-29 22:07:50 +02:00
gittihub-jpg
88b7cd8e96
Update js/privatebin.js
...
Thanks, updated this to avoid relying on `Array.isArray()` for the `FileList` case and to always set `attachment_name` to an array.
Co-authored-by: Mikhail Romanov <42250412+Ribas160@users.noreply.github.com>
2026-04-29 10:04:22 +02:00
gittihub-jpg
8a7f7a60a5
fix: Bugs in the attachment functionality ( #1824 )
...
Fixes #1824
Generated by OpenClaw bounty agent.
Signed-off-by: gittihub-jpg <rico@springer-mail.net>
2026-04-28 16:33:05 +02:00
rugk
1cc811644f
docs: improve JSDoc
2026-02-23 16:00:31 +00:00
rugk
5fd974e247
style: fix/remove trailing comma
2026-02-23 16:00:22 +00:00
rugk
30f80d055b
wipfix: fix JS syntax errors
2026-02-23 15:54:56 +00:00
rugk
5dab2392b9
Merge branch 'master' into xss/jsImprove
2026-02-23 16:48:21 +01:00
rugk
69e37c2c04
refactor: introduce purifyHtmlConfigStrictSubset
2026-02-23 16:45:31 +01:00
rugk
dcaa019599
refactor: use modern spread syntax for combining object
...
Given it's 2026 this really should be supported by all browsers now: https://caniuse.com/mdn-javascript_operators_spread,mdn-javascript_operators_spread_spread_in_arrays,mdn-javascript_operators_spread_spread_in_function_calls,mdn-javascript_operators_spread_spread_in_object_literals
2026-02-23 16:36:46 +01:00
rugk
7e506c7f83
refactor: drastically simplify JS "has HTML" extension again
...
Co-authored-by: El RIDO <elrido@gmx.net>
2026-02-23 16:31:13 +01:00
Stephan Kristyn
5d22847ef1
ES6 Compat code broke everything. Reverting. E2E testing wth multiple files works
2026-02-12 13:48:49 +01:00
Stephan Kristyn
cfea0fb20e
Now leaving styling to customer if he wants the filename and filesize as a hyperlink or outside the hyperlink
2026-02-11 19:03:34 +01:00
Stephan Kristyn
755be747a6
Refactoring the way DOM element is created and styled. Now leaving styling to customer
2026-02-11 18:41:44 +01:00
Stephan Kristyn
9ab16674aa
Adding Bootstrap Classname to dynamically created child element
2026-02-10 18:22:17 +01:00
Stephan Kristyn
e2b4b8a7f8
Adding new DOM element, CSS and JS code
2026-02-10 14:36:03 +01:00
El RIDO
ec656a5456
credit Persian translation & enable use of Persian plurals
2026-02-06 19:15:02 +01:00
Ali Fani
6a0fd6fb44
Add Persian (fa) language support and update supported languages list
2026-02-06 11:23:14 +03:30
El RIDO
a1c8966a36
Merge branch 'master' into linter-semicolon-insertion
2026-01-28 07:33:58 +01:00
El RIDO
a4eaa77b82
address semicolon insertion lint
...
> Code that uses automatic semicolon insertion inconsistently is hard to read and maintain.
See: https://github.com/PrivateBin/PrivateBin/security/quality/rules/js%2Fautomatic-semicolon-insertion
2026-01-25 09:41:52 +01:00
El RIDO
0ed48c455f
address unneeded defensive code lint
...
IMHO this check is actually necessary, as we do call the function with an empty argument. So we need a guard there, but we could simplify it a bit, by making the argument an empty array by default. I still kept the check for undefined (line 3249, first check) in case the caller passes us an undefined variable.
See: https://github.com/PrivateBin/PrivateBin/security/quality/rules/js%2Funneeded-defensive-code - Copilot suggested to simply remove the if-condition and its else block, which I think is wrong.
2026-01-25 09:26:14 +01:00
Ribas160
b1f57bddd1
Fix eslint errors
2025-12-14 09:18:56 +02:00
Ribas160
ed9b3d1aa0
fix: The content format is not reset on create a new or clone document
2025-12-14 09:08:48 +02:00
Ribas160
54d002d26f
fix: Attachment disappears after a "paste" in the message area
2025-12-09 15:43:59 +02:00
El RIDO
aa931c7a5c
enable Swedish translations
2025-12-02 06:40:07 +01:00
rugk
ad55131831
refactor: use given HTML config for DOMPurify
2025-11-15 09:57:39 +00:00
rugk
f6893d338b
refactor: use DOMParser for checking if translation is HTML
2025-11-13 13:34:51 +00:00
El RIDO
e427458cd0
Merge branch 'master' into advisory-fix-1
2025-11-11 22:00:09 +01:00
Mikhail Romanov
ff5aee85b4
Insert file names as break-separated text nodes
...
Co-authored-by: El RIDO <elrido@gmx.net>
2025-11-11 20:05:32 +02:00
Ribas160
9c71fbcc70
Use pure JavaScript to create a div element
2025-11-11 17:45:27 +02:00
Ribas160
14b68af528
Insert drag and drop file names as a text, not html
2025-11-10 17:59:18 +02:00
Ribas160
a7b253a43a
fix: error fetching attachments from blob
2025-11-05 17:33:08 +02:00
El RIDO
a91d0afebd
ensure there is still a space between commenter icon and name
2025-10-28 16:35:58 +01:00
El RIDO
c4f8482b30
Refactored jQuery DOM element creation
...
using plain JavaScript, to ensure text nodes are sanitized
2025-10-25 12:56:55 +02:00
rugk
851befb39d
Merge branch 'master' into eslint
2025-10-08 18:31:10 +02:00
El RIDO
e7c2aa4d60
address eslint errors
2025-10-07 00:11:49 +02:00
El RIDO
f0560bcc27
address eslint errors
2025-10-06 23:47:08 +02:00
El RIDO
23624d693c
shorten show password message
...
as per suggestion of @rugk during review
2025-10-06 22:08:04 +02:00
