100 Commits
Author SHA1 Message Date
aleksey-hoffman 5b6cab440d Dev (extensions): add main-flow test coverage for the extension lifecycle - Cover install/load, activation in the worker isolation host, an API call allowed with its permission and denied without it, and teardown on disable/uninstall - Assert the host binds caller identity on every privileged IPC call - Add neutral regression cases for the realm-escape technique - Runs under vitest in CI on Linux, alongside the Rust command tests 2026-10-18 13:52:50 +03:00
aleksey-hoffman 4b0a241999 Fix (extensions): harden extension isolation and permission checks - Enforce manifest-declared permissions host-side in Rust for extension shell commands, reading the authoritative on-disk manifest instead of relying on the IPC caller - Remove the unused in-process sandbox helper that shared host realm intrinsics; the Web Worker and sandboxed iframe remain the real isolation boundary - Tighten the static extension-code screen and add Rust and JS regression tests 2026-10-18 13:46:57 +03:00
aleksey-hoffman 74ddf6222a Docs: add security policy - Report vulnerabilities privately via GitHub private vulnerability reporting - Supported versions, response goals and scope 2026-10-18 13:20:46 +03:00
aleksey-hoffmanandcarfeii 45cedf892f Fix (security): SSRF via DNS rebinding and redirects in extension downloads - Check resolved addresses inside the DNS resolver so every connection is covered, including redirect hops, retries and fallback URLs - Re-validate every redirect target - Block more non-public ranges (CGNAT, 0.0.0.0/8, multicast, reserved, IPv4-mapped/compatible IPv6, NAT64, 6to4) and bracketed IPv6 literals - Fixes #552
Co-authored-by: carfeii <carfeii@users.noreply.github.com>
2026-10-18 13:15:54 +03:00
aleksey-hoffman c2295cecd5 Dev: sync Cargo version with package.json (2.2.0) 2026-10-17 18:33:56 +03:00
aleksey-hoffman 61cdbb61f2 Docs: add code signing policy section 2026-10-17 03:26:00 +03:00
aleksey-hoffman 4ea1afd55a CI: fix signed installer upload in release workflow - Set GH_REPO since sign-windows job has no checkout - Keep signed installer as a workflow artifact 2026-10-17 02:52:57 +03:00
aleksey-hoffman 1a6400a241 CI: sign Windows installer via SignPath in release workflow - Upload unsigned installer only as a workflow artifact, never to the release - Add sign-windows job (release-signing, 6h approval timeout) that verifies the Authenticode signature and uploads the signed installer - Don't edit notes of published releases - Increase SignPath approval timeout in sign-windows workflow 2026-10-17 02:05:23 +03:00
aleksey-hoffman a4d4f4f1c1 Dev: keep locale JSON files ending with a newline 2026-10-16 15:59:34 +03:00
aleksey-hoffman 588165e688 New feature: select multiple files with Shift+arrow keys 2026-10-16 15:59:34 +03:00
aleksey-hoffman 0ae258d627 Fix: SMB move to trash confirms before permanent delete
Windows UNC paths and remote drives cannot use the Recycle Bin. Ask with the existing permanent-delete dialog, then delete only those paths. Local trash is unchanged, and a failed trash never removes the file.
2026-10-11 19:30:19 +00:00
aleksey-hoffman 4a33b290e0 UX: redesign dashboard page (delete remove from fav button) 2026-09-30 10:10:03 +03:00
aleksey-hoffman 5f678f8b27 Fix: double clicking window top area is not toggling maximized state 2026-09-29 19:49:28 +03:00
aleksey-hoffman 9560da5177 Fix: broken window state after fullscreen, maximize and snap
- Fit the restored main window into the work area on startup so an oversized saved size (e.g. from fullscreen) no longer breaks restore
- Restore window state in stages: frame first, then maximized and fullscreen
- Make the maximize button exit fullscreen instead of toggling maximize
- Disable window drag regions while fullscreen
2026-09-29 17:49:20 +03:00
aleksey-hoffman 3eca4c17ae UX: redesign dashboard page 2026-09-29 16:56:29 +03:00
aleksey-hoffman fed49ceede UX: improved tag editor
- Tags can now be rearranged in the editor and will be displayed in that order in the component
- The component now displays as many tags as it can fill in the available space instead of showing 1 and hiding the rest under the "+X"
- Increased click area for the color selector and edit buttons
2026-08-27 15:46:18 +03:00
aleksey-hoffman e65d67cf06 UX: improve clipboard menu
- Better design
- Added previews and file size
2026-08-27 13:08:29 +03:00
aleksey-hoffman 74eeadab83 New feature: allow to reorder items in quick panel 2026-08-27 00:02:28 +03:00
aleksey-hoffman dc5c8cb32e New feature: duplicate tab 2026-08-24 16:33:01 +03:00
aleksey-hoffman 662a6988b3 Refine: Fix: sidebar drives not opening on middle click 2026-08-24 15:19:34 +03:00
aleksey-hoffman b116ef21aa Fix: sidebar drives not opening on middle click 2026-08-24 14:37:18 +03:00
aleksey-hoffman a8c1dddb82 New settings: default directory and startup page 2026-08-24 14:16:47 +03:00
aleksey-hoffman d55295a91e UX: improved settings search
- Marching shortcuts now appear in the search results
2026-08-21 22:03:12 +03:00
aleksey-hoffman 5b3137c8c7 New shortcuts: switch to previous/next opened tab 2026-08-21 19:06:41 +03:00
aleksey-hoffman 7f7be33aed New feature: add multi range selection 2026-08-21 18:52:48 +03:00
aleksey-hoffman 1699f780ac Dev: lint 2026-08-21 17:15:44 +03:00
aleksey-hoffman b930cbaa21 Refine: UX: added ability to save navigator settings "per folder"; redesigned menu 2026-08-21 17:12:26 +03:00
aleksey-hoffman 833ec8b5a1 UX: added ability to save navigator settings "per folder"; redesigned menu 2026-08-21 15:09:26 +03:00
aleksey-hoffman 2d40dcc47c Dev: rename isCorrected key 2026-08-20 17:50:43 +03:00
aleksey-hoffman 71653d8554 UI: Add Armenian locale (by MaximalXP) 2026-08-20 17:49:59 +03:00
aleksey-hoffman d022c0a5b6 Docs: update contributing 2026-08-20 17:38:22 +03:00
aleksey-hoffman 1325919d30 Docs: update contributing 2026-08-20 17:32:33 +03:00
aleksey-hoffman 1a9108db37 UX: Remove ability to set app as default FM in MS store version
- Remove unvirtualizedResources restricted capability (MS store rejected it)
- Keep app launcher
2026-07-21 17:19:54 +03:00
aleksey-hoffman 25e1a766b6 Dev: fix snap builds 2026-07-18 01:58:18 +03:00
aleksey-hoffman ce4829f303 CI: fix msix 2026-07-17 23:41:54 +03:00
aleksey-hoffman 5ee320512a CI: fix msix 2026-07-17 20:56:58 +03:00
aleksey-hoffman f5da528998 Docs: update CI 2026-07-17 20:49:28 +03:00
aleksey-hoffman e23f6c5c25 v2.2.0 2026-07-17 18:59:21 +03:00
aleksey-hoffman 5ece662d9b UI: set specific width for navigator options popover; add missing changelog locales 2026-07-17 18:56:35 +03:00
aleksey-hoffman b831975885 Docs: changelog 2026-07-17 18:41:24 +03:00
aleksey-hoffman db15621b06 Refine: large dir loading performance 2026-07-17 00:49:33 +03:00
aleksey-hoffman 165b342c67 Docs: contributing 2026-07-17 00:30:27 +03:00
aleksey-hoffman 2bb74f8826 Refactor: app launcher handling 2026-07-16 14:12:52 +03:00
aleksey-hoffman c239bb4f4d Refine: app launcher 2026-07-13 18:28:10 +03:00
aleksey-hoffman 248002c899 Refine (address bar editor): scrolling the virtual list breaking selection state 2026-07-13 16:48:51 +03:00
aleksey-hoffman c95fa5478d Dev (address bar editor): scrolling the virtual list breaking selection state 2026-07-13 14:59:18 +03:00
aleksey-hoffman 00190b6d8d Refine: right mouse click on navigator pane removes file selection 2026-07-12 19:36:27 +03:00
aleksey-hoffman a6139049cb Refine: right mouse click on navigator pane removes file selection 2026-07-12 19:30:26 +03:00
aleksey-hoffman f35d1b505c UX: right mouse click on navigator pane removes file selection 2026-07-12 19:24:01 +03:00
aleksey-hoffman 9aeae4d176 Refine: icon loading 2026-07-12 17:11:06 +03:00
aleksey-hoffman 649adaccc6 Refine: icon loading 2026-07-12 16:51:33 +03:00
aleksey-hoffman 54499cda27 Refine: icon loading 2026-07-12 14:11:40 +03:00
aleksey-hoffman 93167d7952 Dev: fix path, deps bump regressions 2026-07-11 19:31:48 +03:00
aleksey-hoffman 1a6ec7eab0 Dev: fix path, deps bump regressions 2026-07-11 14:17:13 +03:00
aleksey-hoffman a8670aad5a Dev: refactor path formatting 2026-07-09 22:20:40 +03:00
aleksey-hoffman 116e592a41 Dev: refactor path formatting 2026-07-09 22:04:57 +03:00
aleksey-hoffman 162632661f Refine: lint; allow "/" locations on Linux 2026-07-09 21:46:51 +03:00
aleksey-hoffman 1ddf5156ce Refine: lint; allow "/" locations on Linux 2026-07-09 11:52:44 +03:00
aleksey-hoffman b25bedcb62 Refine: lint; allow "/" locations on Linux 2026-07-09 11:39:18 +03:00
aleksey-hoffman 1d5a1c55a4 Dev: bump deps; code clean up 2026-07-09 11:34:54 +03:00
aleksey-hoffman 31c665c6f8 Dev: lint; allow "/" locations on Linux 2026-07-08 15:51:38 +03:00
aleksey-hoffman c776f0ba8b Refine: drag area: pointer movement might prevent action click 2026-07-08 15:43:48 +03:00
aleksey-hoffman e711a5e33c Fix: type-to-search is not activating for non-latin layouts 2026-07-08 15:11:45 +03:00
aleksey-hoffman 47c68e330a Fix: directory entries re-order after loading 2026-07-08 15:06:26 +03:00
aleksey-hoffman 7e0c2edb1c Refine: custom icons are loading with a noticable delay 2026-07-08 13:18:59 +03:00
aleksey-hoffman cd567de215 Fix: directory entries re-order after loading 2026-07-08 13:14:02 +03:00
aleksey-hoffman 8c03bf4190 Fix: custom icons are loading with a noticable delay 2026-07-08 12:53:23 +03:00
aleksey-hoffman d70cc169e2 Dev: lint, rename, npm audit fix 2026-07-07 16:38:33 +03:00
aleksey-hoffman c6bbdf0767 Docs: simplify phrasing 2026-07-06 17:25:04 +03:00
aleksey-hoffman 01d65af76a UX: improve text range dismissal 2026-07-06 14:53:58 +03:00
aleksey-hoffman 389003f3b5 UX: improve home page styles 2026-07-06 14:39:48 +03:00
aleksey-hoffman 0d77129ff7 UX: Add "disconnect" option to context menu 2026-07-06 14:37:13 +03:00
aleksey-hoffman 2013cdb98d Dev: fix copy current dir path shortcut throwing error 2026-07-06 13:13:21 +03:00
aleksey-hoffman ff7356aafb UX: improve home page context menu
- Close menu on action button click
- "Open in new tab" action opens navigator page
- When new tab opens, scroll tab bar end
2026-07-06 13:05:44 +03:00
aleksey-hoffman dbee91384d Fix: WSL host UNC path handling on Windows
- Normalize extended UNC paths for modern context menu
- Treat //wsl.localhost as a virtual directory listing WSL distros
2026-07-06 12:49:16 +03:00
aleksey-hoffman 041a55b678 UI: small design improvements
- Simplify context menu: show "edit card" as an action button
- Reduce action buttons size in context menu
2026-07-06 12:29:14 +03:00
aleksey-hoffman 4e311d32ac Fix: setting "default file manager" not working in MS store build 2026-07-03 14:29:41 +03:00
aleksey-hoffman e1dd1f8693 Fix: Cannot open files in SMB share 2026-07-03 11:06:39 +03:00
aleksey-hoffman fa654d3cf5 Dev: auto-match Edge WebDriver to WebView2 and add navigator folder navigation test 2026-07-03 01:15:51 +03:00
aleksey-hoffman 97b5f41b27 Refine: extensions view reactivity 2026-07-03 00:39:24 +03:00
aleksey-hoffman b355bf9653 Dev: errors 2026-07-03 00:26:30 +03:00
aleksey-hoffman 6a143e37ad Refine: extensions API 2026-07-03 00:06:40 +03:00
aleksey-hoffman 9ec716863a Add frontend HTTP body size guard and cache manifest HTTP allowlists. 2026-07-03 00:05:41 +03:00
aleksey-hoffman 1d027e2edf Extensions: add new API: apply layout and sorting preferences; refine HTTP request API
- Add sigma.view (layout/sort) behind view permission (@sigma-file-manager/api 1.11.0)
- Derive HTTP host allowlists from installed manifests server-side; cap request body size
- Reset modal scroll/focus only on setContent, not updateElement
2026-07-02 23:51:33 +03:00
aleksey-hoffman 6c8c03dda5 Extensions: add new API: HTTP request; add some design improvements 2026-07-02 20:05:17 +03:00
aleksey-hoffman 273c863608 Refine: Box selection 2026-07-02 18:32:22 +03:00
aleksey-hoffman 7524706463 New feature: Box selection 2026-07-02 17:36:59 +03:00
aleksey-hoffman d6282b5cfc Refine: allow extensions use local binaries 2026-07-02 13:58:26 +03:00
aleksey-hoffman 8c529895a1 New feature: allow extensions use local binaries 2026-07-01 15:17:26 +03:00
aleksey-hoffman 062e9c4d00 Fix: translations 2026-06-30 17:10:33 +03:00
aleksey-hoffman a58999e6ae Fix: translations 2026-06-30 16:55:28 +03:00
aleksey-hoffman 084d5cb0c0 Dev: fix ts errors, lint 2026-06-30 16:47:11 +03:00
aleksey-hoffman 0aa3d58dbc Refine: virtual locations
- Refactor: Make drive list change reactively
2026-06-30 16:31:47 +03:00
aleksey-hoffman a6289a9d53 Refine: virtual locations
- Make drive list change reactive
2026-06-30 16:27:08 +03:00
aleksey-hoffman 76396fdab2 UX: Save scroll positions and active tabs 2026-06-30 16:04:56 +03:00
aleksey-hoffman a3ead6ff10 Refine (regression): grid navigation is broken 2026-06-30 13:53:56 +03:00
aleksey-hoffman 195ad1cf4e Refine: system clipboard
- New settings for controlling visibility of the clipboard toolbar for extenrally copied images and paths
2026-06-30 13:38:34 +03:00
aleksey-hoffman 846d6373bc Dev (regression): grid navigation is broken 2026-06-30 11:56:11 +03:00
aleksey-hoffman d59e8e9ea4 New settings: Window memory / performance control 2026-06-30 11:52:07 +03:00
aleksey-hoffman bcd382aa97 UX: improve image / gif / video preview memory usage and responsiveness 2026-06-29 15:18:17 +03:00