20548 Commits (hotfix-rc-browser)

 

All Branches   

Search

Author	SHA1	Message	Date
Vince Grassia	456e7deb89	Bumped client version(s) (#19038) ... (cherry picked from commit e760b1c923) Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	2 days ago
Alex	fd12c7c029	[PM-32088] Switch phishing data source to GitHub (#18890) (#18979) ... * Switch phishing data source to GitHub and remove fallback mechanism The phish.co.za mirror is down, causing every update cycle to timeout on the primary fetch before falling back to the GitHub raw URL. This removes phish.co.za entirely and uses GitHub as the sole data source, which was the original source before the mirror was introduced. - Rename `remoteUrl`/`fallbackUrl` to `ghSourceUrl` on PhishingResource type - Remove phish.co.za URLs from both Domains and Links resources - Remove catchError fallback block in `_updateFullDataSet()` - Errors now propagate to `_backgroundUpdate()` which already handles retries (3 attempts with 5-minute delays) and graceful degradation * revert the fallback logic removal, change prop name, add use fallback flag * Update Links primaryUrl to Bitwarden-hosted blocklist * remove all fallback logic (cherry picked from commit bfc1833139)	6 days ago
Bernd Schoolmann	935f85c058	Revert "[deps] KM: Update Rust crate rsa to v0.9.10 [SECURITY] (#18220)" (#18693) (#18704) ... This reverts commit bea6fb26f8. (cherry picked from commit b5c3735808)	3 weeks ago
Anders Åberg	967fe05a75	PM-31474: Cherry pick disabling PRF on desktop (#18689)	3 weeks ago
Jason Ng	90b15c1109	[PM-29951] add archive flag check to vault-v3 desktop (#18660) (#18663) ... * add archive flag check to vault-v3 desktop, sync vault-v2 and vault-v3 (cherry picked from commit 50427beba6)	3 weeks ago
Oscar Hinton	3416977dad	Ensure "MyVault" is not identified as an organaization (#18643) (#18647) ... When creating a new vault item in the My Vault filter owner would not be set. (cherry picked from commit a4355dbcab)	3 weeks ago
Brandon Treston	1e83f6f446	Fix empty toast message when owner deletes himself (#18613) ... Co-authored-by: JaredScar <thewolfbadger@gmail.com>	3 weeks ago
Conner Turnbull	5c3669ad98	[PM-31295] Remove price from next charge on individual subscription page (#18600) (#18608) ... * Remove price from next charge on individual subscription page * Revert subscription-card changes, limit scope to legacy component (cherry picked from commit 4fad2c3bcd)	3 weeks ago
Oscar Hinton	6c880ea2ad	[PM-31264] Broken vault filters in milestone-1 (#18589) (#18599) ... * Fix vault filters Now uses the same `createFilterFunction` as web rather than the custom proxy like approach. * Remove provide (cherry picked from commit cf6d02fafa)	3 weeks ago
Anders Åberg	fefc8badfd	PM-31294: Unlock Passkey using getWebVaultUrl over getHostname (#18597) (#18602)	3 weeks ago
Alex	15ff818fa8	[PM-30808] Migrate Phishing Detection storage to PhishingIndexedDbService (#18517) (#18592) ... * Initial changes to look at phishing indexeddb service and removal of obsolete compression code * Convert background update to rxjs format and trigger via subject. Update test cases * Added addUrls function to use instead of saveUrls so appending daily does not clear all urls * Added debug logs to phishing-indexeddb service * Added a fallback url when downloading phishing url list * Remove obsolete comments * Fix testUrl default, false scenario and test cases * Add default return on isPhishingWebAddress * Added log statement * Change hostname to href in hasUrl check * Save fallback response * Fix matching subpaths in links. Update test cases * Fix meta data updates storing last checked instead of last updated * Update QA phishing url to be normalized * Filter web addresses * Return previous meta to keep subscription alive (cherry picked from commit 178fd9a577) Co-authored-by: Leslie Tilton <23057410+Banrion@users.noreply.github.com>	3 weeks ago
Graham Walker	2c3701358d	[PM-31203] Change Phishing Url Check to use a Cursor Based Search (#18561) (#18586) ... * Initial changes to look at phishing indexeddb service and removal of obsolete compression code * Convert background update to rxjs format and trigger via subject. Update test cases * Added addUrls function to use instead of saveUrls so appending daily does not clear all urls * Added debug logs to phishing-indexeddb service * Added a fallback url when downloading phishing url list * Remove obsolete comments * Fix testUrl default, false scenario and test cases * Add default return on isPhishingWebAddress * Added log statement * Change hostname to href in hasUrl check * Save fallback response * Fix matching subpaths in links. Update test cases * Fix meta data updates storing last checked instead of last updated * Update QA phishing url to be normalized * Filter web addresses * Return previous meta to keep subscription alive * Change indexeddb lookup from loading all to cursor search * fix(phishing): improve performance and fix URL matching in phishing detection Problem: The cursor-based search takes ~25 seconds to scan the entire phishing database. For non-phishing URLs (99% of cases), this full scan runs to completion every time. Before these fixes, opening a new tab triggered this sequence: 1. chrome://newtab/ fires a phishing check 2. Sequential concatMap blocks while cursor scans all 500k+ URLs (~25 sec) 3. User pastes actual URL and hits enter 4. That URL's check waits in queue behind the chrome:// check 5. Total delay: ~50+ seconds for a simple "open tab, paste link" workflow Even for legitimate phishing checks, the cursor search could take up to 25 seconds per URL when the fast hasUrl lookup misses due to trailing slash mismatches. Changes: phishing-data.service.ts: - Add protocol filter to early-return for non-http(s) URLs, avoiding expensive IndexedDB operations for chrome://, about:, file:// URLs - Add trailing slash normalization for hasUrl lookup - browsers add trailing slashes but DB entries may not have them, causing O(1) lookups to miss and fall back to O(n) cursor search unnecessarily - Add debug logging for hasUrl checks and timing metrics for cursor-based search to aid performance debugging phishing-detection.service.ts: - Replace concatMap with mergeMap for parallel tab processing - each tab check now runs independently instead of sequentially - Add concurrency limit of 5 to prevent overwhelming IndexedDB while still allowing parallel execution Result: - New tabs are instant (no IndexedDB calls for non-web URLs) - One slow phishing check doesn't block other tabs - Common URL patterns hit the fast O(1) path instead of O(n) cursor scan * performance debug logs * disable custom match because too slow * spec fix --------- (cherry picked from commit 60c28dd182) Co-authored-by: Leslie Tilton <23057410+Banrion@users.noreply.github.com> Co-authored-by: Alex <adewitt@bitwarden.com>	3 weeks ago
Maciej Zieniuk	193389b958	Wire up DI for PRFUnlockService in desktop (#18587) (#18590) ... (cherry picked from commit ec812a7d77) Co-authored-by: Anders Åberg <anders@andersaberg.com>	3 weeks ago
bitwarden-devops-bot	c2b55e31cf	Bumped client version(s)	3 weeks ago
Vijay Oommen	2aea6406a5	[PM-29501] Use bit-chip-select when there are too many orgs (#18368)	3 weeks ago
Oscar Hinton	8bd8a12f65	Fix milestone 1 vault list not showing when not using sdk crypto (#18550)	3 weeks ago
Jason Ng	47a2f59784	[PM-31188] Desktop Trash Items Context Menu Updates (#18530) ... * apply isDeleted check to other options in desktop context menu for items	3 weeks ago
renovate[bot]	082bbd716f	[deps]: Update Minor github-actions updates (#18434) ... * [deps]: Update Minor github-actions updates * Revert update of actions/create-github-app-token in test-browser-interactions.yml --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com> Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>	3 weeks ago
Vijay Oommen	94c40b53aa	PM-30799 added html clean up for the domain (#18393)	3 weeks ago
bw-ghapp[bot]	46266dfd20	Autosync the updated translations (#18560) ... Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	3 weeks ago
bw-ghapp[bot]	e03abdaed5	Autosync the updated translations (#18558) ... Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	3 weeks ago
bw-ghapp[bot]	b744164f7a	Autosync the updated translations (#18559) ... Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	3 weeks ago
Rui Tomé	71db33d45d	[PM-28842] Add max length validation to master password policy form (#18237) ... * Update master password policy dialog to limit the minimum length to 128 * Update master password policy to use dynamic maximum length from Utils * Add unit tests for MasterPasswordPolicyComponent to validate password length constraints and scoring	4 weeks ago
Anders Åberg	903026b574	PM-2035: PRF Unlock (web + extension) (#16662) ... * PM-13632: Enable sign in with passkeys in the browser extension * Refactor component + Icon fix This commit refactors the login-via-webauthn commit as per @JaredSnider-Bitwarden suggestions. It also fixes an existing issue where Icons are not displayed properly on the web vault. Remove old one. Rename the file Working refactor Removed the icon from the component Fixed icons not showing. Changed layout to be 'embedded' * Add tracking links * Update app.module.ts * Remove default Icons on load * Remove login.module.ts * Add env changer to the passkey component * Remove leftover dependencies * PRF Unlock Cleanup and testes * Workaround prf type missing * Fix any type * Undo accidental cleanup to keep PR focused * Undo accidental cleanup to keep PR focused * Cleaned up public interface * Use UserId type * Typed UserId and improved isPrfUnlockAvailable * Rename key and use zero challenge array * logservice * Cleanup rpId handling * Refactor to separate component + icon * Moved the prf unlock service impl. * Fix broken test * fix tests * Use isChromium * Update services.module.ts * missing , in locales * Update desktop-lock-component.service.ts * Fix more desktoptests * Expect a single UnlockOption from IdTokenResponse, but multiple from sync * Missing s * remove catches * Use new control flow in unlock-via-prf.component.ts Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com> * Changed throw behaviour of unlockVaultWithPrf * remove timeout comment * refactired webauthm-prf-unlock.service internally * WebAuthnPrfUnlockServiceAbstraction -> WebAuthnPrfUnlockService * Fixed any and bad import * Fix errors after merge * Added missing PinServiceAbstraction * Fixed format * Removed @Inject() * Fix broken tests after Inject removal * Return userkey instead of setting it * Used input/output signals * removed duplicate MessageSender registration * nit: Made import relative * Disable onPush requirement because it would need refactoring the component * Added feature flag (#17494) * Fixed ById from main * Import feature flag from file * Add missing test providers for MasterPasswordLockComponent Add WebAuthnPrfUnlockService and DialogService mocks to fix test failures caused by UnlockViaPrfComponent dependencies. --------- Co-authored-by: Thomas Avery <43214426+Thomas-Avery@users.noreply.github.com>	4 weeks ago
bmbitwarden	644caceb08	Pm 30608 defect the send page is not refreshed after removing the text in the search bar (#18421) ... * PM-30608 resolved search bug * PM-30608 resolved x button click issue	4 weeks ago
SmithThe4th	a2ea4b784d	Force sync to get immediate organization revoke on the extension (#18545)	4 weeks ago
Shane Melton	3a70b94b2d	[PM-31199] Fix flaky Vault test (#18544) ... * Fix flaky spec file * Remove duplicate i18nPipe import that was causing warnings	4 weeks ago
Jason Ng	3228e986af	[PM-30890] Desktop Sync Improvements for Archive (#18466)	4 weeks ago
Vijay Oommen	cf2427848e	[PM-30879] Huntress Integration (#18505)	4 weeks ago
Maciej Zieniuk	a59760f83b	[PM-26049] Always store users auto unlock key on Cli (#18477) ... * Always store auto user key on CLI * update unit tests * prevent bad vault timeout state * Update libs/key-management/src/key.service.ts Co-authored-by: Bernd Schoolmann <mail@quexten.com> --------- Co-authored-by: Bernd Schoolmann <mail@quexten.com>	4 weeks ago
Bryan Cunningham	3a5b31f7df	fix overlap of product switcher in side nav (#18533)	4 weeks ago
Thomas Avery	bc8c925cd0	[PM-27486] Remove feature flag PM25174_DisableType0Decryption (#18413)	4 weeks ago
Bryan Cunningham	6cf434cf11	[CL-841] landing layout component (#17969) ... * wip * wip * implement new control flow syntax * new landing helper components * add missing imports to header * create max width container * create landing card component * address claude feedback * fix center aligned text * ensure secondary content is centered for now * only render container when there is content * remove max width container * remove constructor init of variable * remove unnecessary styling * build styling into helper components * ensure content grows * ensure content takes allowed width * apply padding to elements instead of header and check for projected content * use Array.from to filter nodes * fix logo width * use has selector to apply actions styles, simplify heading padding * remove unneeded content projection * remove unneeded comment * use modern control flow for story * update max width classes to signal and remove switch * make logo input readonly * remove variables * remove object type * fix width types usage * add comments about component usage * fix broken variable reference * fix broken max width class usage * only appyly y padding to header actions	4 weeks ago
Jackson Engstrom	57378f1cb3	[PM-20079] Updates header new/invite members button text spacing	4 weeks ago
Jason Ng	47b574dbc3	[PM-31072] If Archive Item is in Trash, remove Unarchive button (#18481)	4 weeks ago
Leslie Xiong	f57cb83d46	[BUG FIX]Desktop/Pm 31148/Pm 31149/Unexpected behaviors for Collections and Folders (#18506) ... * fixed collections still appearing if all orgs are suspended * fixed 'No folders' not displaying vault items * PR followup: - converted `allOrganizationsDisabled` to computed property - converted observables to signals	4 weeks ago
Oscar Hinton	c2f68e0bf6	Use correct key for new send (#18523)	4 weeks ago
adudek-bw	a8f0bc8d4b	Change send success page text to not mention email verification (#18382) ... * Change send success page text to not mention email verification * [PM-30706] replacing message and fixing double word bug * [PM-30706] improving message parameters --------- Co-authored-by: Alex Dragovich <46065570+itsadrago@users.noreply.github.com> Co-authored-by: Alex Dragovich <adragovich@bitwarden.com>	4 weeks ago
Oscar Hinton	d1c7f995c3	[PM-31158] Change default send to file for old ui (#18526) ... * Change default send to file for old ui * Trigger change detection to ensure signals are refreshed	4 weeks ago
Oscar Hinton	01d6b3dd1e	Disable rounded corner in desktop (#18498)	4 weeks ago
bw-ghapp[bot]	87c68ada74	Autosync the updated translations (#18514) ... Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	4 weeks ago
bw-ghapp[bot]	b8a8400ff7	Autosync the updated translations (#18515) ... Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	4 weeks ago
bw-ghapp[bot]	553708dc58	Autosync the updated translations (#18513) ... Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>	4 weeks ago
Daniel James Smith	466bbd2f88	Replace deprecated codecov/test-results-action with codecov/codecov-action with report_type set to test_results (#18497) ... https://github.com/codecov/test-results-action?tab=readme-ov-file#%EF%B8%8F-deprecation-warning-%EF%B8%8F Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>	4 weeks ago
John Harrington	f8d2800859	[PM-26989] Add Support For Arc Browser on MacOS (#17909) ... * added support for arc browser	4 weeks ago
Jonathan Prusik	dafa00346c	[PM-25615] Handle missing autofillOverlayContentService case (#18369) ... * handle missing autofillOverlayContentService case * additional checks autofillOverlayContentService	4 weeks ago
Leslie Xiong	a28193f880	fixed misalignment of suspended org icon (#18502)	4 weeks ago
Bryan Cunningham	daacff888d	[CL-1020] background color updates (#18417) ... * Adding new background colors * add sidenav color variables * fix admin console text color * update sidenav logos to use correct fill color * update nav logo focus ring color	4 weeks ago
Nick Krantz	a9d8edc52c	[PM-28749] Desktop Transfer Items (#18410) ... * add transfer items prompt to desktop * add transfer service to vault v3	4 weeks ago
Derek Nance	1baed4dea8	[PM-30470] Revert to using X11 on Linux desktop (#18465)	4 weeks ago