Chupacabra

CryptPad v1.2.0 (Chupacabra)

What's new

• /settings/
  • import local pads into a registered user's drive
• /slide/
  • slides can now be exported to pdf
  • fixed support for reference link definition across all slides in markdown
  • see issue 77 for details

Bug fixes

• when changing your display name in the drive: empty name is now converted to "Anonymous"
• fixed race condition when changing user's realtime object and redirecting during registration
• read-only mode in CKEditor no longer shows editor buttons
• ctrl-z no longer wipes out the document in pads
• /settings/
  • exporting your user data when anonymous no longer yields a file named "undefined-[date].json"
  • failing to enter the correct string when clearing your drive now provides feedback
• /poll/
  • removed horizontal scrollbar from table in chromium
  • no longer ask for your name if you're intentionally anonymous
• /drive/
  • better spacing on "rename file" input
  • better contentmenu positioning
  • add a transparent border to unselected items for better positioning
  • keep the focus on the iframe window after canceling a deletion
  • prevent very long filenames from making very large items
  • fixed strange transparency and overlapping bugs in drive tree with context menu
  • fixed non-functional open action from context menu in drive tree
  • Links are now updated in your drive when you upgrade access rights
• toolbar
  • button icons were not black for all users
  • prevent very long titles from overflowing
• updated libraries
  • chainpad-crypto
    • due to differences in which methods safari supports for Uint8Arrays
  • chainpad-netflux
    • expose the historyKeeper-id via the network object, not on each web-channel
  • chainpad (0.3.6)
    • fixed behaviour in onSettle

General Improvements

• toolbar
  • if you know the corresponding edit link to a pad, present an option to open an edit pad in read-only mode
  • dropdown menus can now autocomplete for letter presses
  • 'settings' app is now accessible from the home page toolbar
• add dev-mode to server to override caching
  • DEV=1 node server.js
  • https://github.com/xwiki-labs/cryptpad/tree/staging#developing-cryptpad
• updated the readme
  • remove outdated text
    • we don't use leveldb anymore
    • we don't use famfamfam icons anymore
  • add new instructions
    • you will need a node version that can run ES6
    • how to use dev mode
• removed unused dependencies from bower.json for faster installation
  • lil-uri
  • reconnecting websocket
  • proxy-polyfill
  • spin.js
• /drive/
  • contextmenu support for multi-select options
  • when renaming or creating new files, clicking outside of the input now renames
  • add background color to hovered elements in tree view
• display the loading screen faster
• new default text for pad and code apps
• tips during loading screen
• on registration page
  • replaced "I will remember my username and password" checkbox with a popup which is more clear

Known issues

• Operational transformation causes problems in /pad/
  • we believe this is due to differences in how browsers treat text nodes
• Phantom viewers (pads which show anonymous users which are not actually there)
  • problem is presumably in the serverside code
• intermittent log in issues with Edge
• safari's private-mode blows up when we try to use localStorage
  • this prevents us from letting you log in
• loading screen tooltips are not widely implemented across translations

Bunyip's Revenge

CryptPad v1.1.1 (Bunyip's revenge)

What's new

• stronger Content Security Policy headers harden CryptPad against cross-site scripting (XSS) attacks
• new bootloader script for compatibility with CSP headers, which loads scripts and forcefully overrides browser caching issues

Bug fixes

• More careful handling of strings which are passed into alertify.js
  • popup logs are sanitized (always)
  • alerts, prompts, confirms are validated by default, and must be overridden with a 'force' flag
• fixed pad export vulnerability which allowed XSS
  • our very special thanks to Martin Gubri for bringing this to our attention
• userlist no longer updates its content as HTML, protecting against XSS
• Removed toString api from hyperjson
  • new major semver revision used by CryptPad
• fixed bug in /slide/ that affected present mode under certain circumstances
• removed ugly red outline on images in /slide/
  • somehow this snuck in from debugging

Bunyip

CryptPad v1.1.0 (Bunyip)

What's new

• User settings app
  • Allows you to change your display name
  • back up and restore your list of pads
  • erase your user data
  • un-hide hidden tooltips with "don't show me again"
• When asked if you would like to set your name, if you cancel, do not ask again
• User name fixes
  • once a user's name is provided, set it in other anonymous pads and remove the set-name prompt
• set document title to file name when naming from the drive
• Drive
  • hide "all-files" section
  • improved "create new file" workflow
  • context menu in unsorted files now allows deletion
  • Show the options which are available by right-click as a set of buttons in the top menu.
• Clientside encryption library no longer checks signatures
  • invalid messages won't affect the document
  • strictly a performance enhancement
• Better support for opening links in CKEditor
  • right-click menu displays an option to open links
• remove placeholders in code, slide
  • users found them confusing, reverting to old behaviour
• Added a default pad in the CryptDrive after you sign up
  • README pad that is automatically created first time you visit your drive
  • use Cryptput and messages.js to create a pad with this content
• Chainpad
  • added new apis
  • onSettle (calls back when changes are flushed)
• Home page header and footer links to our new blog
• feedback api
  • queries an endpoint with parameters
  • provides us with feedback about which UI elements users prefer
  • doesn't ever expose the content of your document
  • the endpoint is an html page which explains what it does
  • /settings/ app allows you to disable user metrics

Bug fixes

• logging in redirects you to drive
  • if you're not on /drive/, it opens in a new tab instead of navigating away from your current page
• hide links in the top toolbar if there is not enough room for them
• ctrl-click in drive opens in a new tab
• New ChainPad Release 0.3
  • Fixed bug which caused a few letters to be lost when multiple people type at the same time (OT on checkpoints)
  • Small performance improvement ("patch already known" bug)
• fixed /code & /drive race condition
• messages.js is no longer loaded multiple times
  • only the necessary files are loaded
• "patch already known" bug is fixed, yielding better performance when syncing a pad
• "breadcrumb" in drive handles very long paths more gracefully
• in /slide/: the 'exit presentation' button was sometimes unclickable
  • fixed
• optimized listmap api
  • very deep paths resulted in explosive computational complexity
• hid bootstrap tooltip error
• read only pad is editable
• Fixed Edge home page layout problems

Translator's release notes

• some updated terminology
  • we no longer refer to URLs. please replace all instances of URL with link
  • we no longer store pads in localStorage. please replace all instances of localStorage with 'drive'
  • we no longer refer to 'documents'. instead, please use 'pad' (mostly, see the English translation)
  • we capitalize the Pad in CryptPad.
• removed unused keys
• added an /assert/translations/ page which lists the state of translations per language
• stabilize keys that we will need in the next few releases
• complete Spanish translations
• updated privacy policy

Known issues

• Operational transformation causes problems in /pad/
  • we believe this is due to differences in how browsers treat text nodes
• Phantom viewers (pads which show anonymous users which are not actually there)
  • problem is presumably in the serverside code
• Custom color themes can result in unreadable color combinations in toolbar buttons
• log in issues with Edge

Agogwe

CryptPad v1.0.0 (Agogwe)

What's new

• New look
  • New homepage & static pages
  • More consistent styles
• User accounts
  • Creating an account allows you to access your list of pads from everywhere
  • It's also zero-knowledge : your private data is encrypted using your username and password, we don't know them, we can't recover them or access your data in any way
• CryptDrive
  • New way to sort your pads using an "explorer-like" UI
  • Every pad you visit or create is automatically added to the drive.
    • Pads you visit are added in "Unsorted files", you can move them using drag&drop
    • You can create pads directly in a folder using the "New" button or the context menu (right click)
• Toolbar
  • "New" buttons + user account management + expand/collapse CKEditor toolbar
• Slide app
  • Navigation buttons when in present mode

Bug fixes

• Remove tab notification when someone joins/leaves the pad
• Safari CSS with pads
• Reload the page when the hash changes

Known issues

• Operational Transformation algorithm does not transform correctly over checkpoints
• Long-running server processes can acquire "phantom viewers" over time
  • this manifests as pads which display some number of viewers on your pad which are not actually there