| Commit message (Collapse) | Author | Age |
... | |
|
|
|
| |
After refactoring some recipes in getferdi#1964, we no longer need to expose some APIs to recipes.
|
|
|
|
|
| |
* fix: remove reference to '@electron/remote' module for spell-checker
* chore: removed redundant methods from being exposed via 'window.ferdi' to the recipes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* security: do not expose electron API to services
Service code running the the main world should not have access to any
electron API.
This still allows recipes from webview.js accessing these APIs through
the @electron/remote module and/or the Ferdi object, but
webview-unsafe.js and the untrusted code coming from the service will
not have any access.
Currently, no recipe accesses these APIs in its webview-unsafe.js, so
the change should not break any recipes.
* Expose electron API through the Ferdi object
Instead of the unsafe window.ferdi in the main world, we should expose
functionality to recipes through the RecipeWebview class.
* Update CHANGELOG.md
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
* chore: expose some functions to the recipe child processes
so as to bypass the need for the recipe to require '@electron/remote'
|
|
|
|
| |
consistent error handling
|
|
|
|
| |
correctly
|
| |
|
| |
|
| |
|
|
|
|
| |
This reverts commit 26a9dba22236bc22a7612107630282cfe02d20e0.
|
|
|
|
| |
- upgrade 'uuid', '@types/uuid', 'macos-version', 'normalize-url' and 'os-name' dependencies to latest
- updated 'macos-version' imports to named imports
|
|
|
|
| |
were used for shift/alt keys
|
|
|
|
|
|
|
| |
These changes are mainly to ensure that 'shell.open*' invocations are only in a single file.
* Moved 'openPath' into the 'url-helpers' file.
* Extract 'openExternalUrl' into a common location in 'url-helpers'
This is done so that we can then apply vetting rules to ensure that there is no security concern as described in https://benjamin-altpeter.de/shell-openexternal-dangers/
|
| |
|
|
|
|
| |
the 'cmdKey'
|
|
|
|
|
|
|
|
| |
- add missing meta charset to index.html
- dont restrict scaling for user in index.html
- load animations.css conditionally based on motion preference
- load transitions conditionally in js and css based on motion preference
Co-authored-by: Vijay Raghavan Aravamudhan <vraravam@users.noreply.github.com>
|
| |
|
|
|
|
|
|
| |
'require' (#1752)
* refactor references to 'userData' and 'appData' directories to move hardcoding into single location
* convert to es6 for lower memory usage as per https://codesource.io/the-difference-between-import-and-require-in-javascript/
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- replace deprecated fs.exists with fs.existsSync
- replace console.log with debug
- replace hardcoded FERDI_VERSION in start.js with dynamic one from package.json
- correct JSDoc annotations in Handler.js
- simplify macOSPermissions.js
- updates to various eslint rules
- add FileReader to known globals
|
|
|
|
|
|
|
|
|
|
| |
- update .eslintrc to work for .js and .ts
- update devDependencies
- lint properly both root /src and nested /packages
- update webhint recommended setting for tsconfig.json to shrink output
- Manage all eslint rules from the repo root
- escape single quotes in scripts to please windows build
Co-authored-by: Vijay A <avijayr@protonmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Enable service contextIsolation
* Enable contextIsolation on the service webviews
* Expose a new API window.ferdi in the service main world to allow
calling back into the service isolated world
* Expose a new IPC message inject-js-unsafe from the service isolated
world to execute Javascript in the service main world (i.e., run code
without context isolation). While the name contains the "unsafe"
suffix to show the lack of context isolation, this should mostly be
safe, as no nodejs APIs are available in the injected code.
* Refactor the Notifications shim into a part in the isolated world that
handles displaying and modifying notifications, and a shim in the main
world for the Notifications class. The two communicate via the
window.ferdi endpoint and a Promise object can be used to detect
notification clicks.
* Refactor the screen sharing shim into a part in the isolated world
that enumerated shareable screens and windows and a shim in the main
world that displays the media selector and completes the media
selection promise.
* Expose the injectJSUnsafe API to recipes to inject javascript code
into the main world without context isolation.
* Expose setBadge to the main world
The window.ferdi.setBadge API can be used to update the service badge
from injected unsafe Javascript
* Safer script injection into the service main world
Make sure that we don't try to serialize stray objects back from the
main world to the isolated world by always surrounding the script to be
executed by an anonymous function.
* Always read recipe assets as utf8
* Remove window.log from recipes
We didn't use it anywhere and its behavior was confusing in production
mode.
* Inject multiple unsafe scripts at the same time
* Find in page without remote module
Remove the @electron/remote dependency from the find in page (Ctrl+F)
functionality. The remote webContents is replaced with Electron IPC.
Synchronous IPC messages are handled in the main Electron process,
because the renderer process cannot reply to IPC messages synchronously.
* Update to latest contextIsolation recipes
* Fixing issue with missing 'fs' functions.
Co-authored-by: Vijay A <avijayr@protonmail.com>
|
|
|
|
| |
clipboard events.
|
| |
|
|
|
|
|
|
|
|
| |
* Upgrade various dependencies to latest, remove unnecessary electron-hunspell
- upgrade eslint and friends to latest
- remove deprecated 'node-sass' in favor of 'sass'
- disable new rules from 'eslint-config-airbnb' that are conflicting with current code style
- add workspace config for 'vscode' that silences 'experimentalDecorator' warning and forces 'prettier' to single quote
* Run yarn lint to autofix with new ruleset and worked down lint issues to zero
|
|
|
|
| |
'environment.js'. (#1588)
|
| |
|
|
|
|
| |
context menu actions (#1494)
|
|
|
|
|
| |
Extracted from 240c3a72363e7388779c9ed3c6467ec63bb64d94 according to
https://github.com/getferdi/ferdi/pull/1456#discussion_r641182688 and
https://github.com/getferdi/ferdi/pull/1456#discussion_r641183662
|
|
|
|
|
|
|
|
|
|
|
| |
* Extract screenshare into a separate file
Extracted from 240c3a72363e7388779c9ed3c6467ec63bb64d94 according to
https://github.com/getferdi/ferdi/pull/1456#discussion_r641194876
* Cosmetic screenshare changes and cancellation
* Makes the screen/window selector more readable
* Adds a Cancel button to close the selector
|
|
|
|
| |
Extracted from 357b23b69c119e3d10926613ca31588d5c7285fc according to
https://github.com/getferdi/ferdi/pull/1456#discussion_r641185050
|
| |
|
|
|
| |
* Locked new version of 'recipes' submodule with corresponding changes.
|
| |
|
| |
|
|
|
|
| |
catchup from Franz source). [skip ci]
|
|
|
|
|
|
|
| |
* Adding DuckDuckGo as an alternative search engine.
* Fixing review comments.
* Fixing review comments.
|
| |
|
|
|
|
|
| |
* Used already exported common functions to avoid the same logic being repeated.
* Use a different package to retrieve the os-name for the 'About Dialog'.
|
| |
|
|
|
|
|
|
| |
Change the Google Search link in the context menu from
https://www.google.com/#q=searchterm
to
https://www.google.com/search?q=Mollie
|
|
|
|
|
|
|
| |
Co-authored-by: FranzBot <i18n@meetfranz.com>
Co-authored-by: vantezzen <hello@vantezzen.io>
Co-authored-by: Makazzz <makazzzpro@live.ca>
Co-authored-by: Stefan Malzner <stefan@adlk.io>
Co-authored-by: Amine Mouafik <amine@mouafik.fr>
|
|
|
| |
Co-authored-by: Gautam Singh <gautamsi@users.noreply.github.com>
|
|
|
| |
Co-authored-by: Juan Mora <juanvalentin.mora@globant.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Implement #387
* Fix lint
* Upgrade to Electron 9
* Remove dependency on electron-spellchecker
* Allow multiple languages to be selected
* Fix lint
* Don't show spellchecker language chooser for macOS
* Fix _requireAuthenticatedUser throwing error on startup
* Add FAB
|
|
|
|
|
|
|
| |
* Remove unmaintained en.json
* Fix missing translations for Dark Reader settings, harmonize case
* Harmonize Dark Reader case
|