Highlights
A security release, from a four-domain audit of the codebase. If you use a
password on your notebook, update before changing that password — see the
first item.
Fixed
- Edits made after a password change could be lost (introduced in 0.10.0).
Changing or removing your database password left the app writing to the
database file it had just replaced, so anything you wrote afterwards was
gone at quit. Your notes on disk were always correctly encrypted and
intact — only that session's later edits were affected. Also fixes the
password staying in memory after locking.
- A note could no longer trick the app into launching a file. A link to a
non-PDF opened the PDF viewer anyway, and its "open externally" button then
handed the file to the OS — so a shared or imported note could get an
executable run in two clicks. Only real PDFs open the viewer now.
- Imports and exports stay inside their folders. Crafted references in an
imported vault could write outside the notebook, read files from elsewhere
on your disk, or — on the next export — overwrite files outside the folder
you picked. Every one of those paths is now checked. Symlinks are no longer
followed into or out of a vault, and malformed vault files can no longer
crash the app mid-import.
- Links only open the web. Clicking a link in reading view handed any
address to the operating system, including ones that reach Windows file
shares or launch other apps. Now http, https, and mailto open;
everything else is ignored — matching what editing view already did. The
same applies to links inside PDFs.
- Oversized or malformed images fail on their own instead of taking the app
down with them.
- The notebook database and data folder are created private to your user
account (Linux and macOS).
- A failed encrypt/decrypt no longer leaves a scratch copy of the notebook in
the data folder.
Changed
- The set-password dialog now says plainly that images and PDFs are stored as
ordinary files and are not encrypted — only the note database is.
What's Changed
- docs(changelog): the 0.10.1 security section (86a5223)
- fix(security): audit findings — data loss, path traversal, link schemes (a024cb2)
- refactor(split): scene, geometry, paint, input out of whiteboard lib.rs (1e7ecfa)
- refactor(split): persistence + dialogs out of app.rs (791659d)
- refactor(split): find, math, stores, importing out of app.rs (c465fec)
- refactor(split): tables + element out of editor lib.rs, blockrefs out of app.rs (f702be1)
Full Changelog: v0.10.0...v0.10.1
