aleksey-hoffman
5b6cab440d
Dev (extensions): add main-flow test coverage for the extension lifecycle - Cover install/load, activation in the worker isolation host, an API call allowed with its permission and denied without it, and teardown on disable/uninstall - Assert the host binds caller identity on every privileged IPC call - Add neutral regression cases for the realm-escape technique - Runs under vitest in CI on Linux, alongside the Rust command tests
2026-10-18 13:52:50 +03:00
aleksey-hoffman
4b0a241999
Fix (extensions): harden extension isolation and permission checks - Enforce manifest-declared permissions host-side in Rust for extension shell commands, reading the authoritative on-disk manifest instead of relying on the IPC caller - Remove the unused in-process sandbox helper that shared host realm intrinsics; the Web Worker and sandboxed iframe remain the real isolation boundary - Tighten the static extension-code screen and add Rust and JS regression tests
2026-10-18 13:46:57 +03:00
aleksey-hoffman
74ddf6222a
Docs: add security policy - Report vulnerabilities privately via GitHub private vulnerability reporting - Supported versions, response goals and scope
2026-10-18 13:20:46 +03:00
aleksey-hoffman and carfeii
45cedf892f
Fix (security): SSRF via DNS rebinding and redirects in extension downloads - Check resolved addresses inside the DNS resolver so every connection is covered, including redirect hops, retries and fallback URLs - Re-validate every redirect target - Block more non-public ranges (CGNAT, 0.0.0.0/8, multicast, reserved, IPv4-mapped/compatible IPv6, NAT64, 6to4) and bracketed IPv6 literals - Fixes #552
...
Co-authored-by: carfeii <carfeii@users.noreply.github.com >
2026-10-18 13:15:54 +03:00
aleksey-hoffman
c2295cecd5
Dev: sync Cargo version with package.json (2.2.0)
2026-10-17 18:33:56 +03:00
aleksey-hoffman
61cdbb61f2
Docs: add code signing policy section
2026-10-17 03:26:00 +03:00
aleksey-hoffman
4ea1afd55a
CI: fix signed installer upload in release workflow - Set GH_REPO since sign-windows job has no checkout - Keep signed installer as a workflow artifact
2026-10-17 02:52:57 +03:00
aleksey-hoffman
1a6400a241
CI: sign Windows installer via SignPath in release workflow - Upload unsigned installer only as a workflow artifact, never to the release - Add sign-windows job (release-signing, 6h approval timeout) that verifies the Authenticode signature and uploads the signed installer - Don't edit notes of published releases - Increase SignPath approval timeout in sign-windows workflow
2026-10-17 02:05:23 +03:00
aleksey-hoffman
a4d4f4f1c1
Dev: keep locale JSON files ending with a newline
2026-10-16 15:59:34 +03:00
aleksey-hoffman
588165e688
New feature: select multiple files with Shift+arrow keys
2026-10-16 15:59:34 +03:00
aleksey-hoffman
0ae258d627
Fix: SMB move to trash confirms before permanent delete
...
Windows UNC paths and remote drives cannot use the Recycle Bin. Ask with the existing permanent-delete dialog, then delete only those paths. Local trash is unchanged, and a failed trash never removes the file.
2026-10-11 19:30:19 +00:00
aleksey-hoffman
4a33b290e0
UX: redesign dashboard page (delete remove from fav button)
2026-09-30 10:10:03 +03:00
aleksey-hoffman
5f678f8b27
Fix: double clicking window top area is not toggling maximized state
2026-09-29 19:49:28 +03:00
aleksey-hoffman
9560da5177
Fix: broken window state after fullscreen, maximize and snap
...
- Fit the restored main window into the work area on startup so an oversized saved size (e.g. from fullscreen) no longer breaks restore
- Restore window state in stages: frame first, then maximized and fullscreen
- Make the maximize button exit fullscreen instead of toggling maximize
- Disable window drag regions while fullscreen
2026-09-29 17:49:20 +03:00
aleksey-hoffman
3eca4c17ae
UX: redesign dashboard page
2026-09-29 16:56:29 +03:00
aleksey-hoffman
fed49ceede
UX: improved tag editor
...
- Tags can now be rearranged in the editor and will be displayed in that order in the component
- The component now displays as many tags as it can fill in the available space instead of showing 1 and hiding the rest under the "+X"
- Increased click area for the color selector and edit buttons
2026-08-27 15:46:18 +03:00
aleksey-hoffman
e65d67cf06
UX: improve clipboard menu
...
- Better design
- Added previews and file size
2026-08-27 13:08:29 +03:00
aleksey-hoffman
74eeadab83
New feature: allow to reorder items in quick panel
2026-08-27 00:02:28 +03:00
aleksey-hoffman
dc5c8cb32e
New feature: duplicate tab
2026-08-24 16:33:01 +03:00
aleksey-hoffman
662a6988b3
Refine: Fix: sidebar drives not opening on middle click
2026-08-24 15:19:34 +03:00
aleksey-hoffman
b116ef21aa
Fix: sidebar drives not opening on middle click
2026-08-24 14:37:18 +03:00
aleksey-hoffman
a8c1dddb82
New settings: default directory and startup page
2026-08-24 14:16:47 +03:00
aleksey-hoffman
d55295a91e
UX: improved settings search
...
- Marching shortcuts now appear in the search results
2026-08-21 22:03:12 +03:00
aleksey-hoffman
5b3137c8c7
New shortcuts: switch to previous/next opened tab
2026-08-21 19:06:41 +03:00
aleksey-hoffman
7f7be33aed
New feature: add multi range selection
2026-08-21 18:52:48 +03:00
aleksey-hoffman
1699f780ac
Dev: lint
2026-08-21 17:15:44 +03:00
aleksey-hoffman
b930cbaa21
Refine: UX: added ability to save navigator settings "per folder"; redesigned menu
2026-08-21 17:12:26 +03:00
aleksey-hoffman
833ec8b5a1
UX: added ability to save navigator settings "per folder"; redesigned menu
2026-08-21 15:09:26 +03:00
aleksey-hoffman
2d40dcc47c
Dev: rename isCorrected key
2026-08-20 17:50:43 +03:00
aleksey-hoffman
71653d8554
UI: Add Armenian locale (by MaximalXP)
2026-08-20 17:49:59 +03:00
aleksey-hoffman
d022c0a5b6
Docs: update contributing
2026-08-20 17:38:22 +03:00
aleksey-hoffman
1325919d30
Docs: update contributing
2026-08-20 17:32:33 +03:00
aleksey-hoffman
1a9108db37
UX: Remove ability to set app as default FM in MS store version
...
- Remove unvirtualizedResources restricted capability (MS store rejected it)
- Keep app launcher
2026-07-21 17:19:54 +03:00
aleksey-hoffman
25e1a766b6
Dev: fix snap builds
2026-07-18 01:58:18 +03:00
aleksey-hoffman
ce4829f303
CI: fix msix
2026-07-17 23:41:54 +03:00
aleksey-hoffman
5ee320512a
CI: fix msix
2026-07-17 20:56:58 +03:00
aleksey-hoffman
f5da528998
Docs: update CI
2026-07-17 20:49:28 +03:00
aleksey-hoffman
e23f6c5c25
v2.2.0
2026-07-17 18:59:21 +03:00
aleksey-hoffman
5ece662d9b
UI: set specific width for navigator options popover; add missing changelog locales
2026-07-17 18:56:35 +03:00
aleksey-hoffman
b831975885
Docs: changelog
2026-07-17 18:41:24 +03:00
aleksey-hoffman
db15621b06
Refine: large dir loading performance
2026-07-17 00:49:33 +03:00
aleksey-hoffman
165b342c67
Docs: contributing
2026-07-17 00:30:27 +03:00
aleksey-hoffman
2bb74f8826
Refactor: app launcher handling
2026-07-16 14:12:52 +03:00
aleksey-hoffman
c239bb4f4d
Refine: app launcher
2026-07-13 18:28:10 +03:00
aleksey-hoffman
248002c899
Refine (address bar editor): scrolling the virtual list breaking selection state
2026-07-13 16:48:51 +03:00
aleksey-hoffman
c95fa5478d
Dev (address bar editor): scrolling the virtual list breaking selection state
2026-07-13 14:59:18 +03:00
aleksey-hoffman
00190b6d8d
Refine: right mouse click on navigator pane removes file selection
2026-07-12 19:36:27 +03:00
aleksey-hoffman
a6139049cb
Refine: right mouse click on navigator pane removes file selection
2026-07-12 19:30:26 +03:00
aleksey-hoffman
f35d1b505c
UX: right mouse click on navigator pane removes file selection
2026-07-12 19:24:01 +03:00
aleksey-hoffman
9aeae4d176
Refine: icon loading
2026-07-12 17:11:06 +03:00
aleksey-hoffman
649adaccc6
Refine: icon loading
2026-07-12 16:51:33 +03:00
aleksey-hoffman
54499cda27
Refine: icon loading
2026-07-12 14:11:40 +03:00
aleksey-hoffman
93167d7952
Dev: fix path, deps bump regressions
2026-07-11 19:31:48 +03:00
aleksey-hoffman
1a6ec7eab0
Dev: fix path, deps bump regressions
2026-07-11 14:17:13 +03:00
aleksey-hoffman
a8670aad5a
Dev: refactor path formatting
2026-07-09 22:20:40 +03:00
aleksey-hoffman
116e592a41
Dev: refactor path formatting
2026-07-09 22:04:57 +03:00
aleksey-hoffman
162632661f
Refine: lint; allow "/" locations on Linux
2026-07-09 21:46:51 +03:00
aleksey-hoffman
1ddf5156ce
Refine: lint; allow "/" locations on Linux
2026-07-09 11:52:44 +03:00
aleksey-hoffman
b25bedcb62
Refine: lint; allow "/" locations on Linux
2026-07-09 11:39:18 +03:00
aleksey-hoffman
1d5a1c55a4
Dev: bump deps; code clean up
2026-07-09 11:34:54 +03:00
aleksey-hoffman
31c665c6f8
Dev: lint; allow "/" locations on Linux
2026-07-08 15:51:38 +03:00
aleksey-hoffman
c776f0ba8b
Refine: drag area: pointer movement might prevent action click
2026-07-08 15:43:48 +03:00
aleksey-hoffman
e711a5e33c
Fix: type-to-search is not activating for non-latin layouts
2026-07-08 15:11:45 +03:00
aleksey-hoffman
47c68e330a
Fix: directory entries re-order after loading
2026-07-08 15:06:26 +03:00
aleksey-hoffman
7e0c2edb1c
Refine: custom icons are loading with a noticable delay
2026-07-08 13:18:59 +03:00
aleksey-hoffman
cd567de215
Fix: directory entries re-order after loading
2026-07-08 13:14:02 +03:00
aleksey-hoffman
8c03bf4190
Fix: custom icons are loading with a noticable delay
2026-07-08 12:53:23 +03:00
aleksey-hoffman
d70cc169e2
Dev: lint, rename, npm audit fix
2026-07-07 16:38:33 +03:00
aleksey-hoffman
c6bbdf0767
Docs: simplify phrasing
2026-07-06 17:25:04 +03:00
aleksey-hoffman
01d65af76a
UX: improve text range dismissal
2026-07-06 14:53:58 +03:00
aleksey-hoffman
389003f3b5
UX: improve home page styles
2026-07-06 14:39:48 +03:00
aleksey-hoffman
0d77129ff7
UX: Add "disconnect" option to context menu
2026-07-06 14:37:13 +03:00
aleksey-hoffman
2013cdb98d
Dev: fix copy current dir path shortcut throwing error
2026-07-06 13:13:21 +03:00
aleksey-hoffman
ff7356aafb
UX: improve home page context menu
...
- Close menu on action button click
- "Open in new tab" action opens navigator page
- When new tab opens, scroll tab bar end
2026-07-06 13:05:44 +03:00
aleksey-hoffman
dbee91384d
Fix: WSL host UNC path handling on Windows
...
- Normalize extended UNC paths for modern context menu
- Treat //wsl.localhost as a virtual directory listing WSL distros
2026-07-06 12:49:16 +03:00
aleksey-hoffman
041a55b678
UI: small design improvements
...
- Simplify context menu: show "edit card" as an action button
- Reduce action buttons size in context menu
2026-07-06 12:29:14 +03:00
aleksey-hoffman
4e311d32ac
Fix: setting "default file manager" not working in MS store build
2026-07-03 14:29:41 +03:00
aleksey-hoffman
e1dd1f8693
Fix: Cannot open files in SMB share
2026-07-03 11:06:39 +03:00
aleksey-hoffman
fa654d3cf5
Dev: auto-match Edge WebDriver to WebView2 and add navigator folder navigation test
2026-07-03 01:15:51 +03:00
aleksey-hoffman
97b5f41b27
Refine: extensions view reactivity
2026-07-03 00:39:24 +03:00
aleksey-hoffman
b355bf9653
Dev: errors
2026-07-03 00:26:30 +03:00
aleksey-hoffman
6a143e37ad
Refine: extensions API
2026-07-03 00:06:40 +03:00
aleksey-hoffman
9ec716863a
Add frontend HTTP body size guard and cache manifest HTTP allowlists.
2026-07-03 00:05:41 +03:00
aleksey-hoffman
1d027e2edf
Extensions: add new API: apply layout and sorting preferences; refine HTTP request API
...
- Add sigma.view (layout/sort) behind view permission (@sigma-file-manager/api 1.11.0)
- Derive HTTP host allowlists from installed manifests server-side; cap request body size
- Reset modal scroll/focus only on setContent, not updateElement
2026-07-02 23:51:33 +03:00
aleksey-hoffman
6c8c03dda5
Extensions: add new API: HTTP request; add some design improvements
2026-07-02 20:05:17 +03:00
aleksey-hoffman
273c863608
Refine: Box selection
2026-07-02 18:32:22 +03:00
aleksey-hoffman
7524706463
New feature: Box selection
2026-07-02 17:36:59 +03:00
aleksey-hoffman
d6282b5cfc
Refine: allow extensions use local binaries
2026-07-02 13:58:26 +03:00
aleksey-hoffman
8c529895a1
New feature: allow extensions use local binaries
2026-07-01 15:17:26 +03:00
aleksey-hoffman
062e9c4d00
Fix: translations
2026-06-30 17:10:33 +03:00
aleksey-hoffman
a58999e6ae
Fix: translations
2026-06-30 16:55:28 +03:00
aleksey-hoffman
084d5cb0c0
Dev: fix ts errors, lint
2026-06-30 16:47:11 +03:00
aleksey-hoffman
0aa3d58dbc
Refine: virtual locations
...
- Refactor: Make drive list change reactively
2026-06-30 16:31:47 +03:00
aleksey-hoffman
a6289a9d53
Refine: virtual locations
...
- Make drive list change reactive
2026-06-30 16:27:08 +03:00
aleksey-hoffman
76396fdab2
UX: Save scroll positions and active tabs
2026-06-30 16:04:56 +03:00
aleksey-hoffman
a3ead6ff10
Refine (regression): grid navigation is broken
2026-06-30 13:53:56 +03:00
aleksey-hoffman
195ad1cf4e
Refine: system clipboard
...
- New settings for controlling visibility of the clipboard toolbar for extenrally copied images and paths
2026-06-30 13:38:34 +03:00
aleksey-hoffman
846d6373bc
Dev (regression): grid navigation is broken
2026-06-30 11:56:11 +03:00
aleksey-hoffman
d59e8e9ea4
New settings: Window memory / performance control
2026-06-30 11:52:07 +03:00
aleksey-hoffman
bcd382aa97
UX: improve image / gif / video preview memory usage and responsiveness
2026-06-29 15:18:17 +03:00