Tabbi azray n lqem - 2 ileqman
Ɣur-k ɣef yileqman yezrin! TTwaseknen-d kan i usekyed akked umuqel.Yessefk yal tikkelt ad tesqedceḍ lqem aneggaru n uzegrir.
Lqem aneggaru
Lqem 2.0
Yeffeɣ-d deg 30 apr. 2025 - 751,84 KBIteddu d firefox 109.0 d yileqman imaynutenSecurity Update
This update implements the following measures to enhance security and protect user data:- Cross-Site Scripting (XSS) Protection:
- Implemented the
purify.jslibrary for sanitizing HTML and especially SVG content (custom icons, imported data), preventing the execution of malicious scripts. - Enhanced escaping of all user input (username, link names/URLs, notes, search queries, search suggestions) using the
sanitizeTextfunction to block interpretation as HTML. - Prioritized the secure
textContentmethod for inserting text into the DOM;innerHTMLis used only after explicit sanitization. - Improved validation and sanitization of data when importing settings from JSON files.
- Implemented the
- URL Security:
- Implemented the
sanitizeUrlfunction for strict validation and cleaning of all URLs used in the application (quick links, background, search navigation), blocking unsafe protocols (e.g.,javascript:,data:except for images) and incorrect formats. - All external links opening in a new tab now use the
rel="noopener noreferrer"attributes to protect againsttabnabbingattacks and enhance privacy.
- Implemented the
- API Security and Data Handling:
- Interaction with search suggestion APIs (Google, Bing, DDG, Wikipedia) is performed over HTTPS. Requests and responses are sanitized.
manifest.jsonuses Manifest V3, requesting only necessary permissions (storage) and access to specific hosts (host_permissions) for suggestion APIs.- Data loaded from
browser.storage.localand imported files undergoes validation for correct format and types before use.
- User Confirmations:
- Added explicit confirmation (
confirm()) before deleting quick links and notes to prevent accidental data loss.
- Added explicit confirmation (
UI Improvements- Improved notes interface.
- Minor UI tweaks for settings and search suggestions.
- Added animations when opening a new tab.
- Fixed an issue where a large number of links on the new tab could push the interface off-screen.
Tangalt taɣbalut teffeɣ-d s turagt Turagt IT
- Cross-Site Scripting (XSS) Protection:
Ileqman iqbuṛen
Lqem 1.0.1
Yeffeɣ-d deg 26 apr. 2025 - 745,03 KBIteddu d firefox 109.0 d yileqman imaynutenTangalt taɣbalut teffeɣ-d s turagt Turagt IT