Skip to content

AI Gate v4.7.1

Latest
Latest

Choose a tag to compare

View all tags
@inulute inulute released this 12 Jul 16:43
v4.7.1
This tag was signed with the committer’s verified signature.
inulute inulute
GPG key ID: 9AF2E0376B477E7F
Verified
Learn about vigilant mode.
8459d21
This commit was signed with the committer’s verified signature.
inulute inulute
GPG key ID: 9AF2E0376B477E7F
Verified
Learn about vigilant mode.

Release: v4.7.1 • Date: 2026-07-12 (UTC)

What's new in v4.7.1

🔑 Google OAuth & Pop-up Sign-in Fixed

"Continue with Google" (and other pop-up-based sign-in flows) now work inside webviews.

The root cause was a React 19 behaviour change with custom elements: the allowpopups attribute was passed as a JSX boolean shorthand, which React 19 silently drops on custom elements. The attribute never reached the DOM, so Chromium blocked every pop-up before Electron's handlers could even run.

🛡️ Pop-up Confirmation Dialog

Rather than quietly allowing or blocking pop-ups, the app now shows a native Allow / Always Allow / Decline dialog whenever a webview tries to open a new window. The dialog names both the opener site and destination so you always know what you're approving.

  • Allow — opens the pop-up once
  • Always Allow — saves the opener → destination domain pair; future requests from the same pair open without a prompt
  • Decline — closes the pop-up window

This replaces the previous hard-coded Google-only exception with a user-consent model that works for any provider.

⚙️ Purge Saved Pop-up Permissions

A new Advanced section in Settings → General shows how many pop-up permissions are saved and lets you purge them all with one click. After purging, the confirmation dialog will appear again the next time a site opens a pop-up.

🔒 Security Notes

  • New pop-up windows keep hardened defaults: nodeIntegration: false, contextIsolation: true, no preload, web security on. They reuse the persist:webtool session so sign-in state flows back to the tool webview.
  • The saved allowlist (popup-allowlist.json) is stored separately from settings.json so whole-object settings writes can never accidentally clobber it.
  • Allowlist entries are validated on every read; malformed data is silently ignored.

👏 Contributors

Thanks to @n3yne for the full implementation of this fix — diagnosis, root-cause analysis, and the confirmation dialog system.

📦 Downloads

  • Linux AppImage — AI.Gate-4.7.1.AppImage
  • Linux deb — AI.Gate-4.7.1.deb
  • macOS (Universal) — AI.Gate-4.7.1-universal-mac.dmg
  • Windows — AI.Gate-Setup-4.7.1.exe
  • Flatpak (Flathub) — submission in progress

❤️ Support

If AI Gate makes your workflow better, consider supporting its development:

Your support helps maintain and improve AI Gate, add new features, keep the app free and open source, and ship timely updates.

Made with ❤️ by inulute

Contributors

n3yne
Assets 27
Loading