Skip to content

DiffNotes 1.6.0

Choose a tag to compare

@igorkasyanchuk igorkasyanchuk released this 29 Oct 17:39
· 10 commits to main since this release

Added

  • Notes follow the code: a note keeps its first line's text (code); after a push moves the block, the extension
    puts the note on the nearest line that reads so (moved to line N), or marks it code changed since. The skill sends
    code on every line note and its check script verifies it.
  • Diff blocks in notes: a ```diff block colours its + and - lines; the skill uses it for API examples (a
    changed endpoint's response before and after) next to the request.
  • Numbers in the summary: the skill adds a before / after table when it measured speed, size or load.
  • Note style: detail: brief | normal | thorough in .diffnotes.yml, and per person DIFFNOTES_DETAIL and
    DIFFNOTES_HINTS in the shell profile, over the repository's detail and notes (never over what it requires).

Security

  • Extension sign-in checks the issuer: /connect's answer names the server (iss) and the extension trades a code only
    with the server it asked. Before, a malicious server you connected could send the sign-in window on to another server's
    allow page and collect that server's code and verifier. An older server (no iss) asks to update or to paste a token.
    The allow page names the server and shows the browser's name as what it says it is.