Releases · jmarasch/glyphit

Fixed

Icon packs no longer assume .obsidian. The pack folder is now created
inside whatever configuration folder your vault actually uses. Existing
installs keep their current path, so nothing moves and nothing is lost.
Icons in popped-out windows. Inline icon detection and timers used the
main window's globals, so icons in a popped-out note could fail to render.

Icon markup is parsed and sanitized before it reaches the page. Icons come
from packs you install, so they are now treated as untrusted input: inline
event handlers, javascript: URLs and script-bearing elements are stripped
out. Previously the SVG was inserted as raw HTML.
JSZip replaced with fflate. No dependencies, and it removes the runtime
script injection and eval that JSZip's polyfill chain pulled into the
bundle. Reading icons out of a pack is about four times faster.
Appearance moved into the stylesheet. Icon styling was applied inline,
which put it out of reach of themes and CSS snippets. It is now CSS classes,
so both can override it.

The default Ctrl/Cmd+Shift+J hotkey. Default hotkeys can silently clash
with your own bindings. The command is unchanged and you can assign it a key
under Settings → Hotkeys.

Verified against all fourteen published icon packs — 24,348 icons, no
difference in what is read.