Repository navigation
A security update. Everyone on 2.2.1 should install it.
Security
- A link, form or script in a note's HTML could replace Frisket's window with
another page, and that page could then use the app's access to your files.
Frisket's window now only ever shows Frisket: web and email links open in
your browser, and anything else is blocked. Notes you import or receive
through a synced folder were the realistic route for this. - The window's web content now runs in Electron's sandbox.
- Updated markdown-it and DOMPurify to versions with their published fixes.
Install
- Frisket-Setup-2.2.2.exe installs for your user account, with no
administrator prompt. - Frisket-2.2.2-portable.exe runs without installing.
Windows 10 or 11, 64-bit. The builds are not code-signed yet, so SmartScreen
asks before the first run: choose More info → Run anyway.
SHA-256
7B7192824B8AE7A2EB98133C537C3B5B31C203FF249E5FB34F18509E98BB4F9B Frisket-Setup-2.2.2.exe
FA19030FBBD03FBD23B5CC92B719ACCBDF37FBEBD9330CCE75E4BF1113235954 Frisket-2.2.2-portable.exe