Cronologjie versions di Tabbi - 2 versions
Sta atent cu lis versions vecjis! Chês a vegnin visualizadis par finalitâts di prove e di riferiment.Tu varessis di doprâ simpri la ultime version di un component adizionâl.
Ultime version
Version 2.0
Publicât 2025. ápr. 30. - 751,84 kBAl funzione cun firefox109.0 e sucessivisSecurity Update
This update implements the following measures to enhance security and protect user data:- Cross-Site Scripting (XSS) Protection:
- Implemented the
purify.jslibrary for sanitizing HTML and especially SVG content (custom icons, imported data), preventing the execution of malicious scripts. - Enhanced escaping of all user input (username, link names/URLs, notes, search queries, search suggestions) using the
sanitizeTextfunction to block interpretation as HTML. - Prioritized the secure
textContentmethod for inserting text into the DOM;innerHTMLis used only after explicit sanitization. - Improved validation and sanitization of data when importing settings from JSON files.
- Implemented the
- URL Security:
- Implemented the
sanitizeUrlfunction for strict validation and cleaning of all URLs used in the application (quick links, background, search navigation), blocking unsafe protocols (e.g.,javascript:,data:except for images) and incorrect formats. - All external links opening in a new tab now use the
rel="noopener noreferrer"attributes to protect againsttabnabbingattacks and enhance privacy.
- Implemented the
- API Security and Data Handling:
- Interaction with search suggestion APIs (Google, Bing, DDG, Wikipedia) is performed over HTTPS. Requests and responses are sanitized.
manifest.jsonuses Manifest V3, requesting only necessary permissions (storage) and access to specific hosts (host_permissions) for suggestion APIs.- Data loaded from
browser.storage.localand imported files undergoes validation for correct format and types before use.
- User Confirmations:
- Added explicit confirmation (
confirm()) before deleting quick links and notes to prevent accidental data loss.
- Added explicit confirmation (
UI Improvements- Improved notes interface.
- Minor UI tweaks for settings and search suggestions.
- Added animations when opening a new tab.
- Fixed an issue where a large number of links on the new tab could push the interface off-screen.
Codiç sorzint publicât sot licence Licence MIT
- Cross-Site Scripting (XSS) Protection:
Versions plui vecjis
Version 1.0.1
Publicât 2025. ápr. 26. - 745,03 kBAl funzione cun firefox109.0 e sucessivisCodiç sorzint publicât sot licence Licence MIT