bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2026-02-18 10:23:52 +00:00
Code Issues Releases Wiki Activity
20,031 Commits 1,349 Branches 583 Tags
67af777d769915ea90384e58e3e11ea189b1fd9a
Commit Graph

5847 Commits

Author SHA1 Message Date
Oscar Hinton
67af777d76 Enable directive-class-suffix (#17385) 2026-02-17 09:24:20 -08:00
Leslie Tilton
107f66257c Correct phishing blocker file structure (#17477) 2026-02-17 09:24:20 -08:00
renovate[bot]
1ff87c0b2c [deps] Platform: Update Rust crate arboard to v3.6.1 (#17547) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
 2026-02-17 09:24:20 -08:00
Andreas Coroiu
a0e91f29d6 [PM-27564] Self-host configuration is not applied with nx build (#17279) 
* fix: web not using env variables

* fix: apply claude suggestion

* fix: remove non-working serve targets
 2026-02-17 09:24:20 -08:00
Bernd Schoolmann
b183dd67ed Fix biometrics unlock when pin is enabled (#17528) 2026-02-17 09:24:20 -08:00
neuronull
f8a4083e63 Desktop Autotype fix IPC error handling (#17332) 
* Desktop Autotype fix IPC error handling

* TS lint

* sweep sweep: fix unecessary member name qualifier
 2026-02-17 09:24:19 -08:00
Todd Martin
49ea6f8c5a chore(feature-flag): Removed pm-28325-remove-pm-22110-disable-alternate-login-methods flag 2026-02-17 09:24:19 -08:00
Nick Krantz
b5e724548b [PM-24505] Manually open extension error message (#17116) 
* update manual open message to be more generic to cover more scenarios

* update error state when attempting to open the extension via button press
 2026-02-17 09:24:19 -08:00
renovate[bot]
09fbabcc6c [deps] Vault: Update koa to v2.16.3 [SECURITY] (#17514) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-17 09:24:19 -08:00
Daniel Riera
c3dd485eaf [PM-28516] Inline menu is not working in main (#17524) 
* PM-28516 alidate iframe and stylesheet URLs against their own origins to handle
cases where chrome assigns different extension ids in different contexts

* switch to regex to match exisiting match pattern

* updated regex to account for safari
 2026-02-17 09:24:19 -08:00
Dave
fa0a26ecbb fix(two-factor) [PM-21204]: Users without premium cannot disable premium 2FA (#17134) 
* refactor(two-factor-service) [PM-21204]: Stub API methods in TwoFactorService (domain).

* refactor(two-factor-service) [PM-21204]: Build out stubs and add documentation.

* refactor(two-factor-service) [PM-21204]: Update TwoFactorApiService call sites to use TwoFactorService.

* refactor(two-fatcor) [PM-21204]: Remove deprecated and unused formPromise methods.

* refactor(two-factor) [PM-21204]: Move 2FA-supporting services into common/auth/two-factor feature namespace.

* refactor(two-factor) [PM-21204]: Update imports for service/init containers.

* feat(two-factor) [PM-21204]: Add a disabling flow for Premium 2FA when enabled on a non-Premium account.

* fix(two-factor-service) [PM-21204]: Fix type-safety of module constants.

* fix(multiple) [PM-21204]: Prettier.

* fix(user-verification-dialog) [PM-21204]: Remove bodyText configuration for this use.

* fix(user-verification-dialog) [PM-21204]: Improve the error message displayed to the user.
 2026-02-17 09:24:18 -08:00
renovate[bot]
a05ae283a3 [deps]: Update Rust crate cc to v1.2.46 (#17571) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2026-02-17 09:24:17 -08:00
renovate[bot]
ef5670fdb6 [deps] Platform: Update Rust crate libc to v0.2.177 (#17549) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
 2026-02-17 09:24:17 -08:00
renovate[bot]
21b9ac906a [deps]: Update Rust crate clap to v4.5.51 (#17572) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-17 09:24:17 -08:00
renovate[bot]
ade6242a47 [deps]: Update Rust crate async-trait to v0.1.89 (#17570) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-17 09:24:17 -08:00
bw-ghapp[bot]
96e87fae96 Autosync the updated translations (#17531) 
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
 2026-02-17 09:24:16 -08:00
bw-ghapp[bot]
f7772f77df Autosync the updated translations (#17530) 
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
 2026-02-17 09:24:15 -08:00
bw-ghapp[bot]
981c6dd76f Autosync the updated translations (#17529) 
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
 2026-02-17 09:24:15 -08:00
Addison Beck
927e81249a chore: create eslint rule to catch insecure page script injection (#17437) 
* chore: create eslint rule to catch insecure page script injection

* chore: ignore existing lints

* review: tighten rule scope

* review: add tests
 2026-02-17 09:24:15 -08:00
Jared Snider
85eacdacc3 PM-28506 - TwoFactorSetupYubikey - refactor yubikey form to be rows with 1 field per row to allow remove button to be visible again. (#17519) 2026-02-17 09:24:15 -08:00
Vijay Oommen
2516a1e4af [PM-27287] Items in My Items should show in Inactive 2FA report (#17434) 2026-02-17 09:24:14 -08:00
Stephon Brown
fb753ac9e6 [PM-26044] Update Offboarding Survey for User and Organization (#17472) 
* feat(billing): update messages to add reasons

* feat(billing): update survey with switching reason based on param

* fix(billing): revert value of switching reasons

* fix(billing): revert removal of tooExpensive message

* fix(billing): Add plan type to params and update switching logic

* fix(billing): update to include logic

* fix(billing): PR feedback
 2026-02-17 09:24:14 -08:00
renovate[bot]
62d981821d [deps] Vault: Update koa to v2.16.2 [SECURITY] (#15807) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Matt Andreko <mandreko@bitwarden.com>
 2026-02-17 09:24:14 -08:00
Jeffrey Holland
0c8bb46b44 Autofill/pm 25597 plex password generation (#16997) 
* Correctly fill generated passwords and current password on plex.tv

* Correctly fill generated passwords and current password on plex.tv

* Leave existing forEach

* Add tests for changes
 2026-02-17 09:24:14 -08:00
Brandon Treston
b22c8c2708 fix copy (#17504) 2026-02-17 09:24:13 -08:00
Kyle Spearrin
4032301eb8 [PM-27766] Add policy for blocking account creation from claimed domains (#17211) 
* Added policy for blocking account creation for claimed domains.

* add feature flag

* fix desc

* learn more link

* fix localization key to learnMore

* onpush change detection
 2026-02-17 09:24:13 -08:00
Nick Krantz
69a4740c2f [PM-26688][PM-27710] Delay skeletons from showing + search (#17394) 
* add custom operator for loading skeleton delays

* add `isCipherSearching$` observable to search service

* prevent vault skeleton from showing immediately

* add skeleton for search + delay to sends

* update fade-in-out component selector

* add fade-in-out component for generic use

* address memory leak by using defer to encapsulate `skeletonShownAt`

* add missing provider
 2026-02-17 09:24:13 -08:00
Bernd Schoolmann
7a8c9827a2 Fix desktop not launching (#17485) 2026-02-17 09:24:13 -08:00
Jonathan Prusik
c6ec5b955f [PM-27797] Prevent host page manipulation of inline menu popover attribute (#17400) 
* turn off inline experience if host page aggressively competes for top of top-layer

* add alert message for top-layer hijack scenarios

* widen the backoff threshold

* refactor backoff logic to include popover attribute mutations

* improve getPageIsOpaque check

* do not attempt inline menu insertion if it has been disabled for security concerns

* fix typo

* cleanup

* add tests
 2026-02-17 09:24:12 -08:00
Andy Pixley
c08469d142 [BRE-1303] Providing method for pinning Chrome extension ID for dev (#17432) 2026-02-17 09:24:12 -08:00
Addison Beck
74d3675360 fix: add world: MAIN to Firefox page script registration (#17466) 
* chore: update @types/firefox-webext-browser

* fix: add world: MAIN to Firefox page script registration

* review: add world property to registration type
 2026-02-17 09:24:12 -08:00
Addison Beck
42e58f81e3 fix: enable dynamic URLs for Chrome web accessible resources (#17429) 
This commit adds use_dynamic_url: true to the extension's web_accessible_resources configuration. When enabled, Chrome generates random session-based GUIDs for extension resource URLs instead of using the predictable static extension ID. This enhances privacy by making extension resource URLs unpredictable and prevents third-party enumeration of installed extensions.

The feature is supported in Chrome 102+ and changes resource URLs from chrome-extension://[static-id]/resource to chrome-extension://[random-guid]/resource, with GUIDs regenerating each browser session while maintaining all existing extension functionality.

Addresses: https://bitwarden.atlassian.net/browse/PM-28344
 2026-02-17 09:24:12 -08:00
Alex Morask
c8dfc70999 [PM-27925] Refactor StripeService to allow more than one instance (#17467) 
* Refactor StripeService to allow more than one instance per scope

* Fix linting issue

* Claude's feedback
 2026-02-17 09:24:11 -08:00
Brandon Treston
5659947475 fix error in console (#17468) 2026-02-17 09:24:11 -08:00
bw-ghapp[bot]
946c363891 Autosync the updated translations (#17462) 
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
 2026-02-17 09:24:10 -08:00
neuronull
cb46365a05 Align Desktop Native's Rust CI checks with SDK (#17261) 
* clean crate deps

* update lint workflow

* add rustfmt.toml

* apply rust fmt

* missed one

* fix lint of lint lol

* more deps platform fixes

* fix macos_provider

* some more deps clean

* more cleanup

* add --all-targets

* remove another unused dep

* generate index.d.ts

* fix whitespace

* fix split comment in biometric

* formatting comment in biometric_v2

* apply fmt
 2026-02-17 09:24:10 -08:00
Github Actions
6c781e3259 Bumped client version(s) 2026-02-17 09:24:09 -08:00
Jonathan Prusik
28c48939d9 [PM-27915] Add additional global styling collision defenses for pseudo-elements (#17340) 
* add additional global styling collision defenses for pseudo-elements

* move internal stylesheet into closed shadow root
 2026-02-17 09:24:07 -08:00
Will Martin
86c9554ac8 [PM-28071] add prod test domain for phishing detection (#17450) 2026-02-17 09:24:07 -08:00
Github Actions
ed71d60b8e Bumped Desktop client to 2025.11.2 2026-02-17 09:24:07 -08:00
bw-ghapp[bot]
b1206b84e1 Autosync the updated translations (#17461) 
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
 2026-02-17 09:24:06 -08:00
bw-ghapp[bot]
ec4d29f692 Autosync the updated translations (#17460) 
Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
 2026-02-17 09:24:06 -08:00
Daniel Riera
2ac4f32ce5 Pm 27900 add additional hardening in extension frame validation (#17265) 
* PM-27900 harden iframe, origin route tightening and test updates

* reduce comments to make more legible

* Removes referrer check in favor of PM-27822 #17313 bitwarden/clients@4206447cfe

* nake token optional since it is later set

* whitelist -> allowlist

* improve notes on unsafe

* improve content handler notes

* order allowlist

* improve jsdoc on ismessagefromextension method

* cover additional test cases

* rename verifytoken and document more clear, update referrer

---------

Co-authored-by: Miles Blackwood <mrobinson@bitwarden.com>
 2026-02-17 09:24:06 -08:00
renovate[bot]
df0e683a11 [deps] Platform: Update semver to v7.7.3 (#17457) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
 2026-02-17 09:24:05 -08:00
renovate[bot]
1bfec5595e [deps] Platform: Update @types/node to v22.19.1 (#17448) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-02-17 09:24:03 -08:00
Oscar Hinton
f232192ad2 [PM-28231] Enable component-class-suffix (#17384) 
* Enable component-class-suffix

* Rename file
 2026-02-17 09:24:03 -08:00
Maximilian Power
8962c466a8 Fix Firefox phishing blocker continue button by awaiting tab navigation promises (#17436) 2026-02-17 09:24:03 -08:00
aj-bw
a279b0d4bf removal of freebsd build, upload, release and other references (#17354) 2026-02-17 09:24:02 -08:00
Jordan Aasen
1d46719282 [PM-23384] - Browser extension spotlight directing to Premium signup in web (#17343) 
* premium upgrade nudge

* add specs

* clean up vault template and specs

* fix date comparison. add more specs for date

* fix spec

* fix specs

* make prop private
 2026-02-17 09:24:02 -08:00
Github Actions
9f4f23b601 Bumped client version(s) 2026-02-17 09:24:00 -08:00