Skip to content

v1.1.0 — Secure Image Loading & UI Polish

Choose a tag to compare

@globalroo globalroo released this 04 Apr 00:00
· 87 commits to main since this release

v1.1.0 — Secure Image Loading & UI Polish

  • Secure local image protocol — custom local-img:// protocol with path validation against allowed roots.
  • Content Security Policy — restricts script, style, image, and font sources.
  • DOMPurify sanitization — all rendered HTML is sanitized before injection.
  • Navigation lockdown — all in-app navigation blocked, external links open in default browser.
  • UI polish and theme improvements.