GLOBALEAKS 5.0.45

Changes in version 5.0.45

• Revise mock implementation in relation to multi-lang mocks

GLOBALEAKS 5.0.44

Changes in version 5.0.44

• Move password hashing on clientside
• Upgrade proof of work from sha256 to argon2id with 1 step and 1MB of requirement
• Refactor SecureTemporaryFile replacing AES with ChaCha20
• Enable Brotli compression of static (offline) and dynamic (on-the-fly) content
• Fix bug visualization of files uploaded by recipients introduced in 5.0.19
• Bump client dependencies to latest version
• Update translations

GLOBALEAKS 5.0.42

Changes in version 5.0.42

• Fix possibility to vary expiration date if default data retention policy is disabled

GLOBALEAKS 5.0.43

Changes in version 5.0.43

• Correct regression on logs missing newlines introduced in 5.0.38

GLOBALEAKS 5.0.41

Changes in version 5.0.41

• Re-add markdown support to recipients and context descriptions (#4364)
• Bump client dependencies to latest version

GLOBALEAKS 5.0.40

Changes in version 5.0.40

• Fix visualization of enforced recipients broken in 5.0.0

GLOBALEAKS 5.0.39

Changes in version 5.0.39

• Ensure voice questions could work when defined in question templates
• Bump pdfjs again to v4 with proper packaging
• Bump client dependencies to latest version

GLOBALEAKS 5.0.38

Changes in version 5.0.38

• Correct PDF viewer re-including pdfjs v3

GLOBALEAKS 5.0.33

Changes in version 5.0.33

• Complete implementation of CSP policy based on Trusted-Types
• Enforce validation of every admin config or user input by means of DOMPurify
• Restrict usage of CSS inline scripts (#4345) as previously done on v4
• Fix bug in gl-admin utility preventing possibility to reset 2fa
• Correct feature of re-ordering of questions options (#4348)
• Fix issues #4341, #4344
• Improve packaging of css libraries and overrides
• Bump client dependencies to latest versions
• Update translations

GLOBALEAKS 5.0.32

Changes in version 5.0.32

• Revise language changes utilities in relation to issue #4315
• Fixed validation of multistep questionnaires and extend validation to files (#4336)
• Remove redundant rel=noreferrer made unnecessary by ReferrerPolicy header
• Revise markdown implementation ensuring links are opened always in a new tab
• Ensure to strip every HTML tag (including safe tags) with DOMPurify before parsing markdown.
• Fix issues #4340 and #4338
• [doc] Revise application security document in reference to external links protections
• [doc] Extend documentation adding detail on usage of DOMPurify to filter markdown input